Whois public database is in breach of GDPR, according to European authorities

[Arthur]

I wonder if this means we won't have to pay extra for private Whois registration?

 

Source: www.theregister.co.uk/2018/04/14/whois_icann_gdpr_europe/

 

The Whois public database of domain name registration details is dead.

 

In a letter [PDF] sent this week to DNS overseer ICANN, Europe's data protection authorities have effectively killed off the current service, noting that it breaks the law and so will be illegal come 25 May, when GDPR comes into force.

 

The letter also has harsh words for ICANN's proposed interim solution, criticizing its vagueness and noting it needs to include explicit wording about what can be done with registrant data, as well as introduce auditing and compliance functions to make sure the data isn't being abused.

 

ICANN now has a little over a month to come up with a replacement to the decades-old service that covers millions of domain names and lists the personal contact details of domain registrants, including their name, email and telephone number.

[matt40k]

Nominet must be laughing, had private WHOIS for individuals for years and years

[rom1984]

Looking forward to where this one goes. In fairness to the GDPR, the Article 29 Working Party first highlighted this problem in 2003 and their position has been that ICANN has not been in compliance with the 1998 DP Act since then. None of the issues from 2003 are different under GDPR other than higher fines for them. It sounds like the GDPR has pushed them into engaging with the Party though and there starting to take action - only took them 15 years

[djrscally]

Does this mean we won't have to fork out the extra £5 for private registrations soon?

[matt40k]

Does this mean we won't have to fork out the extra £5 for private registrations soon?

You don't if it's a .UK (and your an individual).