With the increasing focus on privacy in Europe, and ongoing challenges to the US-European “Privacy Shield” agreement, domain name registrants from Europe see domain names as (yet another) weak link in privacy rights. They wouldn’t be wrong in that – in order to protect domain name registrants in the case of the failure of a domain name registrar, all registrars are required to put the underlying registrant data in escrow with an accredited data escrow provider. Until recently, however, the only ICANN-approved data escrow provider has been the US company Iron Mountain, and as a result all of the agreements (and the underlying data) were subject to US law. That, of course, means they were subject to US law enforcement and civil litigation demands as well.
That has recently changed. According to heise online (in German), DeNIC, the German company in charge of the .de country level domain, has recently been accredited by ICANN as a third party data escrow provider for registrar data. DeNIC’s accreditation provides a European alternative to Iron Mountain, and provides some assurances that European data remains in Europe subject to European privacy laws. While that’s an improvement, domain registries must also escrow data, and there’s only a single provider for those services as well (can you guess who that might be?). DeNIC, looking to close that weak link in data protection, is actively seeking accreditation there as well.
While this particular service may not impact US business to any great extent, it does demonstrate an increasing interest in European alternatives under the current political climate. No doubt companies like XING (a German LinkedIn alternative) and UK online bookseller Wordery will seek to capitalize on increasing European concern over US service providers.
At the rate things are going, US disregard for privacy may create the European Internet champions that European lawmakers could not.
For more on DeNIC’s accreditation and continuing efforts, see this press release.