ICANN’s Updated Registration Data
Policy Explained

The Registration Data Policy is an Internet Corporation for Assigned Names and Numbers (ICANN) consensus policy that describes requirements for processing registration data for ICANN-accredited registrars and registry operators. The Registration Data Policy establishes the requirements for specific data elements based on the processing activities, including:

• What data registries and registrars collect

• What data registrars transfer to the registries and ICANN

• What data should be published to the public and what should be redacted

• What data registries and registrars need to retain

The policy was updated by ICANN considering new and evolving data protection laws and must be implemented by August 21, 2025.

Collection of domain registration data

As part of the ordering process, CSC will no longer collect or store the administrative or technical contact information, unless required by the registry. You will see changes in CSCDomainManager^SM in the weeks leading up to the policy change on August 21, 2025.

Starting in August, we’ll make the organization field in the contact templates a mandatory field. Under ICANN's updated Registration Data Policy, information listed in the organization field of the registration record is considered the domain holder. As a corporate domain registrar, we require that information to be provided at the time of registration, transfer, or modification to properly reflect the identity of the corporate domain holder.

Publishing domain registration information

CSC will redact registration data that may be considered sensitive personal information. As a result, the only data published by CSC will be registrant organization, state or province, and country data, unless otherwise requested. Additionally, to ensure compliance with national data privacy regulations, the registrant email address will be obfuscated with a link to a web form to facilitate email communication with the domain registrant. All other information will be redacted.

For domains registered with CSC prior to implementation of ICANN’s new Registration Data Policy, we’ll delete the administrative and technical contact information associated with generic top-level domains (gTLDs) in the portfolio over the next few months, unless the registry specifically requires that data.

How could these changes affect my organization?

We recommend reviewing your domain portfolio to ensure the registrant organization field only lists current and valid company information. ICANN requires all registration data to be current and accurate.

If you currently redact your registration data, please note that when CSC implements the new Registration Data Policy, the registrant organization will be published. Please contact your CSC Customer Service Team if you don’t want this to be made public. CSC offers a privacy protection service if you’d like to keep the registration data private.

If you’d like your full registration data to be published in the public registration record, please contact your CSC Customer Service Team to remove the redaction.

Important dates

• August 21, 2025 – Registrars and registries will need to be compliant with the updated ICANN Registration Data Policy.

FAQs
What is the difference between redaction and privacy protection?

The purpose of redaction is to protect personally identifiable information, not to hide the identity of the domain holder. Where domain information is redacted, CSC is required to transfer the information to ICANN for escrow purposes, and to the registry. When using privacy protection, CSC entity data related to our privacy protection service will be transferred to ICANN and registries.

Where the registration data is redacted, the following fields will be published to the public:

Where privacy protection is used, the following details will be displayed to the public in registration data look-up tools:

Why is CSC making the registrant organization field mandatory?

The organization field in the registration record is considered the domain holder. As a corporate domain registrar who exclusively serves corporations and law firms, CSC requires that information to properly reflect the corporate ownership of the domain.

Can I choose to have my full registration data published in the WHOIS and not redacted?

Yes, you can instruct CSC to publish the registration data for your domains. To do so, contact your CSC Customer Service Team to have the information published.