ICANN considering changes that would disallow proxy registration for domains used for commercial purposes, could put user privacy at risk
Electronic Frontier Foundation :
Context & Ripple Effects
EFF is flagging an ICANN rulemaking that would strip proxy registration from any domain used commercially, exposing the people behind small business sites directly in public Whois records. The warning lands mid-arc of ICANN's 2015 governance fight: weeks later it moved to end US government oversight of the organization, with tech firms like Google and Facebook lobbying Congress to bless the handoff.
Privacy-versus-disclosure is a recurring fault line here — three years later ICANN would again restrict registrant data with its GDPR-driven Whois accreditation plan, drawing the same criticism from advocates. The difference is direction: the GDPR fight was about who can query Whois, while this proposal removes anonymity at the source.
First-order effects
- Individuals and sole operators running commercial websites lose proxy privacy outright: their names, addresses, and emails become publicly queryable, exactly the exposure EFF says creates spam, stalking, and doxxing risk.
- Registrars that sell privacy/proxy add-ons see the product effectively outlawed for their commercial-domain customers, cutting a revenue line and forcing them to re-paper terms of service around whatever carve-outs ICANN allows.
Second-order effects
- Businesses may respond by splitting footprints — a proxy-registered informational site plus a bare commercial one — fragmenting the Whois record rather than improving accountability, the outcome critics say undermines the rule's stated anti-abuse purpose.
- The proposal hands law enforcement and trademark plaintiffs easier identity discovery without due-process intermediaries, shifting the cost of abuse investigations from complainants onto registrants.
Third-order effects
- If ICANN keeps overriding community objection on registrant-facing policy — as it later did when it lifted .org price caps over public input — the multistakeholder model's legitimacy erodes, pushing disputes toward regulators instead of ICANN's own processes.
- A norm that commercial activity forfeits online anonymity would extend beyond domains to any infrastructure layer where pseudonymity currently defaults, making registrant identity a standing compliance surface.
The trend: Domain-name governance is steadily trading registrant anonymity for disclosure, with ICANN's policy decisions — not legislatures — setting the default level of online privacy.