Security Trade-Offs in the New EU Privacy Law
Summary: Krebs on Security outlines how the EU's General Data Protection Regulation, effective May 25, 2018, is prompting ICANN to redact registrant names, phone numbers, physical addresses and email addresses from public WHOIS records for all domain registrars globally, with fines for violations reaching up to four percent of global annual revenues. ICANN conceded at a San Juan, Puerto Rico meeting that its proposed accreditation system for vetting access by journalists, security researchers, law enforcement and intellectual property holders probably would not be ready until December 2018, with registrar adoption taking many months after that.
Bottom line: Krebs argues that scammers and phishers routinely reuse the same email addresses and phony contact details across dozens, hundreds or thousands of domains for years, making WHOIS a primary tool for grouping campaigns and identifying operators - and that anti-spam, anti-virus and firewall reputation scoring still depends heavily on manual WHOIS lookups that will likely perform less effectively once the records are redacted.
Read the original at Krebs on Security ↗
- Topics
- Privacy
- Related
- Italy Fines Meta €805 Million Over Facebook's Android Gallery Access Without Explicit Consent Cyber Risks · Nov 15, 2026