⚖️ Domain Compliance & ICANN Regulations

The rules that actually govern domain ownership, transfers, and disputes — and what they mean for you.

Why This Matters

Every accredited registrar is bound by ICANN's Registrar Accreditation Agreement, which sets the rules for WHOIS accuracy, transfer eligibility, and dispute resolution. Knowing these rules helps you avoid losing a domain to an accidental policy violation — or a bad-faith dispute.

1. WHOIS Accuracy Requirements

ICANN requires registrants to keep WHOIS contact information accurate and current. Registrars are required to verify new registrant email addresses and may suspend a domain if verification fails or bounces.

✅ Keep your registrant email address current — this is how registrars reach you for renewal and verification notices
✅ Update WHOIS immediately after any registrant/contact change
✅ Enable WHOIS privacy if you don't want this information public (see our domain privacy guide)

2. The 60-Day Transfer Lock

ICANN policy requires a 60-day lock on domain transfers after initial registration, and again after certain registrant or registrar changes. This is a fraud-prevention measure, not a registrar-specific restriction — every ICANN-accredited registrar enforces it the same way.

✅ Plan transfers around this window if you're switching registrars soon after registering or updating contact info
✅ Full transfer steps are covered in our domain transfer guide

3. UDRP — Dispute Resolution

The Uniform Domain-Name Dispute-Resolution Policy is how trademark holders can challenge a domain registration they believe was made in bad faith. A UDRP complaint doesn't go through court — it's handled by an approved dispute provider (like WIPO), and a losing registrant can have the domain transferred or cancelled.

✅ Avoid registering names that closely mimic an existing registered trademark
✅ If you receive a UDRP complaint, respond within the deadline — default judgments happen when registrants don't respond at all

4. GDPR and WHOIS Redaction

Since 2018, most registrars redact personal WHOIS data for registrants in the EU/EEA by default, in response to GDPR. Many registrars now extend similar redaction globally rather than maintaining two systems — which is part of why WHOIS privacy is free by default at more registrars than it used to be.