CoCCA Software Update Allows Registry Partners to be GDPR-Compliant

CoCCA will be updating its backend registry software to enable its registry partners to be GDPR-compliant in time for the European Union’s General Data Protection Regulation (GDPR) that comes into effect on 25 May

CoCCA will be updating its backend registry software to enable its registry partners to be GDPR-compliant in time for the European Union’s General Data Protection Regulation (GDPR) that comes into effect on 25 May.

The principle of data minimisation, where only personal data that is adequate, relevant and necessary is collected, retained and disclosed has been adopted by the ccTLD managers using CoCCA shared infrastructure of the following ccTLDs: .af, .cx, .gs, .gy, .ht, .hn, .ki, .kn, .sb, .tl, .kn, .ms, .nf.

For the above ccTLDs, as of 15 May the only data collected from domain name registrants will be:
only registrant contact details are required, administrative, technical and billing contacts are optional.
existing administrative, technical and billing contacts may be deleted by registrars.
registrars will be able to associate two email addresses directly with a domain (for abuse reports and technical queries), these emails will be publicly disclosed.

Regarding data disclosure:

  • if a data subject is an EU resident or a non-EU resident who uses an EU registrar (or one of their resellers) personal data (name, email, phone and physical address) will be redacted from publicly available interfaces. For the avoidance of confusion, personal data will be redacted based both on the declared address of the contact and the location of the registrar.
  • if a data subject resides outside the EU and uses the services of a registrar outside the EU the personal data disclosure will not be impacted by GDPR.
  • if personal data has been redacted and the data subject would like to disclose it, the data subject will be provided with tools by CoCCA to disclose the redacted data.
  • if personal data has not been redacted and the data subject believes it should be (for example, a citizen of an EU country residing overseas), the data subject will be provided with tools by CoCCA to redact their personal data.

Access to redacted data will be available for:

  • law enforcement and the Secure Domain Foundation will be able to access redacted data via RDAP and port 43 WHOIS.
  • intellectual property owners or other entities who have a legitimate interest in redacted data will be able to order historical abstracts online for a nominal fee (provided they sign an attestation).

An updated version of the CoCCA software containing multiple GDPR configuration options will be released on 20 April with CoCCA able to assist registry operators to upgrade and configure their registry software to align with their GDPR compliance efforts.

CoCCA advise that it should not be assumed that all registry operators using CoCCA Tools will patch and configure the software for GDPR compliance. There are many registry operators who use dated and unsupported versions of CoCCA Tools.

Pirate Bay ccTLD World Tour Moves On Again After .PE Option Canned

The Pirate Bay’s world tour has moved to another ccTLD after the Peruvian option was cut off after only a few days. This time TPB has moved to Guyana (.gy)

The Pirate Bay’s world tour has moved to another ccTLD after the Peruvian option was cut off after only a few days. This time TPB has moved to Guyana (.gy).

This week has been especially busy for TPB with the .sx (Sint Maarten) option cut off after pressure from the Dutch anti-piracy group BREIN. And this was only eight months after it was forced to change from .se (Sweden). From .sx, TPB had a brief stopover in .ac (Ascension Island) before moving for what it hoped was a more permanent stay in .pe.

However while it would obviously hope the stays would be more permanent, TPB says they have more than 70 domain names, by which one would assume they mean ccTLDs, in reserve.

The .pe option was suspended yesterday without prior warning reported TorrentFreak, which has been keeping tabs on TPB’s moves. And it means the site has had to switch to its fourth ccTLD in a week.

TorrentFreak reports it is unclear how long the Co-operative Republic of Guyana will allow the site to use its domain name, but they are ready to relocate again if needed.

“We have some 70 domain names left, so eventually we will find one that sticks,” a Pirate Bay insider told TorrentFreak. “A few domains have been prepared so we can switch over whenever’s needed.”