David Giza, Stacy Burnette & Pam Little

1. Registrar Stakeholder Group Constituency Meeting David Giza, Stacy Burnette & Pam Little Contractual Compliance Team October 2009

2. Agenda • FY 2010 Compliance Initiatives (Dave) • Enforcement Activity Jan – Oct 2009 (Stacy) • Whois Data Accuracy Study (Dave) • Privacy/Proxy Services Study (Stacy) • RDE Compliance (Pam)

3. Team Members • David Giza, Sr. Director, Contractual Compliance Team Leader • Pam Little, Sr. Director, Contractual Compliance, Asia/Pacific • Stacy Burnette, Director, Contractual Compliance • Khalil Rasheed, Compliance Audit Manager • William McKelligott, Compliance Auditor • Constance Brown, Compliance Specialist

4. FY 2010 Compliance Initiatives • Enforcement Actions • Identify and pursue non-complaint registrars • Use enforcement tools in 2009 RAA • Increase breach, non-renewal and termination notices, as necessary • Audits –Registrar contact info., IRTP, RDE requirements, UDRP and financial compliance • Research – Complete Whois Accuracy Work

5. Enforcement Activity (Jan - Oct 2009) • 16 Registrar Accreditation Agreement (RAA) Terminations and Non-Renewals • 9 Terminations • 7 Non-renewals • 184 Breach Notices Transmitted • 4,290 Enforcement Actions • 9,304 Consumer Complaints Processed (Jan-Sept)

6. Common Non-Renewal and Termination Causes • Registrars fail to comply with RDE deposit requirements • Registrars fail to provide port 43 and web based Whois services. • Registrars fail to pay accreditation fees

7. Planned Registrar Audits

8. Whois Data Accuracy StudyVerification • Determine proportion of domain names from the top 5 gTLDs with different levels of accuracy • Random sample size of 2400 domain names • Accuracy defined per RAA Section 3.3.1.6 as the correct name and a valid postal mailing address • Registrants contacted by NORC to verify ownership of domain name • Preliminary results describe types of inaccuracies found and barriers to accuracy

9. Whois Data Accuracy StudyThree Key Criteria • Is registrant’s address deliverable? • Can registrant’s name be linked with the address? • When contacted, does registrant verify/ acknowledge ownership of domain name?

10. Whois Data Accuracy StudyPreliminary Findings • 51% of records meet all three criteria • 80% meet at least 2/3 criteria • 5% meet none of the criteria

11. Whois Data Accuracy StudyNature of inaccuracies • Registrant concerns about privacy • Limited requirements regarding identity, proof of identity and proof of address • Confusion in role and meaning of registrant • Carelessness by registrant • Little value in domain name ownership • ASCII translation

12. Privacy/Proxy Registration Services Study • Preliminary Results • 580, or about 24.7% of the 2346 domain names analyzed, appear to have been registered using a privacy or proxy service • Additional information contained in the draft report posted on the ICANN website at http://www.icann.org/en/compliance/reports/privacy-proxy-registration-services-study-28sep09-en.pdf

13. RDE Obligations • On-boarding obligations • Enter tri-parte data escrow agreement • Make initial deposit • On-going obligations • Make scheduled deposits • Ensure data meet specs/format

14. Consequences for Non-Compliance • Non-compliance = Breach of RAA Section 3.6 • Consequences • Escalated compliance actions • Suspension (if new RAA), non-renewal or termination • ICANN may publish list of non-compliant registrars

15. Thank You Contractual Compliance Team