URGENT: How the new ICANN Rules Impact You Today

What's Happening?

ICANN (Internet Corporation for Assigned Names and Numbers), the world-wide governing body for domain name registrations, has updated its rules regarding domain ownership. If "ICANN" sounds familiar, you've likely seen the word ‘ICANN’ in annual emails from your domain provider asking you to review your registration details.

ICANN's new Registration Data Policy, published in February 2024, includes new laws and rules for how domain names are governed. There was an 18-month grace period, which ended on August 21, 2025. This is why it's crucial for you to confirm your domain registration details right away.

If you have multiple businesses or domain names, these new rules apply to every one of your domains.

 

The Key Change: Domain Ownership

As of August 21, 2025, the rules for who legally owns a domain name have changed, specifically concerning the "Organization" or "Company Name" fields in your domain's registration record.

Traditionally, this field was optional and not particularly important. However, under the new policy:

• If the Organization/Company Name field is filled out, the domain is now legally owned by that organization, not the individual's name in the Registration Contact information. 
• If it's left blank, the domain is legally owned by the individual whose name appears in the registration record.

Why This Matters:

Consider scenarios where you initially registered a domain under an LLC that was never formed, or your business name has changed. Or you have a business name but you file taxes as a sole proprietorship (meaning you don't have business credentials). Possibly, the website design or marketing company who registered for you may have put the registration in their own name - which means YOU do not own it. Or perhaps the Organization/Company Name is set to more of a nickname for the business, rather than the true operating business name.

If the Organization/Company Name field is outdated or incorrect, the legal ownership of your domain becomes murky, and will not align with your current business structure. More importantly, if you get into a legal war with someone who is trying to steal your domain, it would be a good idea to have backup documents in the name of who you say owns it.

There are many reasons why you need to retain control of your domain's registration. Now is the time to confirm you do.

What You Need to Do (ASAP):

Log into your Domain Registrar account(s) immediately. Go to Domains, then find REGISTRANT contact info (NOT the account's profile information, though you might want to check this too, if it's been awhile since you've logged in.)

Note that most registrars have your contact information in two places, your ACCOUNT with them, and as the REGISTRANT of your domain. We are talking about the REGISTRANT section here.

1. Review each domain: Verify your REGISTRANT contact information (not the account or profile contact info) – your name (or contact name), address, phone, and especially email. Make any necessary changes.
2. Check the "Organization" (or "Company Name") field:
   • For businesses (with staff, partners, employees, or a Corporation. For one-member LLCs, you may consider leaving out a Company Name): Listing your organization as the owner likely makes sense. Ensure the organization's name is in this field and your correct email address is listed within the contact details. For example, you don't want to leave the organization/company name blank, and the name of your old Office Manager displays as the owner! You still need a contact name, phone and email. Typically, you'll need to enter a job description along with your company name (like Owner, or Manager).
   • For sole proprietors (or if you want to retain personal control): You'll likely want to own the domain as an individual. In this case, delete any data in the "Organization/Company Name" field, or uncheck the box called Domain is registered on behalf of a company.
     
   • If you feel your situation is complicated, I advise you to seek the opinion of an attorney.

1. Verify the credit card on file is viable, check the expiration date and cvv code, and that the Auto-Renew button is enabled. In most cases, grace periods for accidental expirations are now gone, which makes it easier for a hacker to swoop in and steal your domain.

Important Notes:

• Any changes you make should trigger a confirmation email. This is for your protection, so watch for that email and respond quickly if your registrar requires you to click on anything.
• Making changes will prevent you from transferring that domain to another provider for 30 days. (it used to be 60 days under the old ICANN rules).
• If you need login information for your domain and believe I have it, please let me know, and I'll provide it as soon as possible. It will be sent to you via email.

Note that the new Registration Data Policy only affects domains ending with .com, .net, .org, .info, and .shop.

Potential Nightmares By Not Taking Action

Opening up new types of domain extensions (like .store, .biz, .online, .tech), has opened new opportunities for businesses—but it also makes brand impersonation, phishing scams, and consumer deception easier than ever. With all these new extensions now available, scammers can register convincing fake sites that closely mimic legitimate businesses.
Scammers can exploit legitimate websites by:

• Typosquatting – Slight misspellings or alternative domain extensions (e.g., YourBrand.store instead of YourBrand.com) to mislead consumers.
• Phishing Scams – Fake customer support or e-commerce sites using official-sounding gTLDs like .bank or .help to steal data.
• SEO Manipulation – Fraudulent domains that outrank legitimate sites, diverting traffic and damaging brand trust.
• Expired Domains Can Be Hijacked Faster – Cybercriminals watch for lapsed domains and register them immediately for fraud.
• Domain Renewal Grace Periods Have Changed – Late renewals might not be reversible as easily as before.

Other Minor Changes

There are other changes; but probably not of much interest to my clients. For example:

• Reduced contact data is being collected and stored on the domain’s servers.
  • Registries are adopting a “thin” data model.
  • Only the minimum data required will be transmitted or stored.
  • Administrative, billing, and technical contacts may no longer be stored or passed to registries unless required.

If You Require Help or Assistance

Email me if you have questions.

Logging into your account on your behalf is not covered under Care Plan Minutes, plus I wouldn't know what the correct answers should be for the various fields. However, if you truly feel you need help, advise me of what the correct information should be, and I will handle it for you (you'll be billed at my hourly rate. Note that I’ll need the 6-digit code from you to log into your account.

 

My take on all of this is that the ICANN/Domain situation will continue to evolve and because of this, it's impossible to foresee what some of the ramifications may be. Doing this domain check now would certainly cut out many potential issues that may come. 

 

Kerri Marvel
Website Designer, SEO Doer, Blog Writer, Website Care Plan Administrator