The ruling puts in place several requirements for registrars, and, in some cases, registries:
- Registrars and registries can’t turn on Whois privacy/proxy by default. Any registrant wishing to use privacy must opt in and pay a fee for doing so.
- Registrars must undertake Know Your Customer (KYC) for registration, similar to how NIXI, which manages .in domains, currently does. This means registrars providing services in India must review government-issued IDs or corporate documents. The court also urged the government to consider requiring registrars to either keep this information on file with NIXI or locally in India.
- Registrars and registries can lose their Safe Harbor protections as intermediaries under Indian law if they don’t take steps to prevent IP infringement. The court took issue with GoDaddy returning search results for searches such as “government of india” with suggestions for that string as a second level domain under multiple top level domains. A court could also issue an injunction requiring registrars not to display any matching domain suggestions for a particular term in search results. Additionally, India can add names to blocklists that should be unable to register.
- Registrars must appoint a Grievance Officer in India who can receive service.
- Registrars must provide data within 72 hours whenever “any entity or individual having legitimate interest, law enforcement agencies (LEAs) or the Courts, request for disclosure of data relating to any infringing or unlawful domain name.”
