WHOIS Privacy & Mandatory Disclosure Matrix

Authoritative policy guide on registrant data privacy and disclosure mandates. Evaluate the intersection of ICANN EPDP redaction standards, EU GDPR compliance, and national ccTLD statutes that strictly prohibit proxy anonymity or mandate public corporate identification.

.us Prohibition Zero Privacy / Proxy Allowed by Federal Statute

Corporate Public Mandatory Legal Entity Publication (.ca, .au, .uk)

ICANN EPDP Global Default Redaction on Generic TLDs

RDRS Portal Centralized ICANN Lawful Disclosure Gateway

National ccTLD & gTLD Registrant Privacy Policies Registry-level enforcement mechanisms, proxy legality, and statutory disclosure requirements

Privacy Audit

Extension	Registry Entity	Category	Proxy Privacy Permitted	Redaction Classification	Legal Mandate & Statutory Authority	Compliance / Abuse Desk
.us	United States	ccTLD	Strictly Banned	Strictly Prohibited	US Department of Commerce / NTIA Policy strictly forbids WHOIS privacy or proxy services. All registrants must provide genuine, un-obfuscated name, address, phone, and email.	[email protected] / registry.us
.ca	Canada	ccTLD	Permitted	Mandatory Public Corporate	CIRA Privacy Policy automatically redacts individual Canadian citizens. However, all corporations, partnerships, and commercial entities have their full legal name and address displayed publicly.	[email protected]
.au	Australia	ccTLD	Strictly Banned	Mandatory Public Corporate	auDA Licensing Rules require valid Australian Business Number (ABN), Australian Company Number (ACN), or trademark. Commercial entities are published in public registry records.	[email protected]
.uk	United Kingdom	ccTLD	Permitted	Mandatory Public Corporate	Nominet allows non-trading individual consumers to opt out of address publication. Trading entities, eCommerce businesses, and corporations are legally mandated to disclose their address.	[email protected]
.de	Germany	ccTLD	Permitted	Full Redaction (GDPR)	Following GDPR implementation, DENIC redacts personal contact data by default. However, third parties with legitimate legal interest (e.g. copyright/trademark holders) can request disclosure via Section 49 DSGVO.	[email protected]
.eu	European Union	ccTLD	Permitted	Mandatory Public Corporate	EURid redacts natural persons. Corporate entities have their full business name, registered city, country, and language publicly visible.	[email protected]
.com / .net	Global Generic Top-Level Domains	Legacy gTLD	Permitted	Default Redacted	ICANN Temporary Specification and Phase 1 EPDP mandate thick WHOIS redaction of registrant names, addresses, and personal emails across all ICANN-accredited registrars.	Authoritative registrar abuse contact (via RDAP)

Navigating Modern Domain Privacy: Legal & Technical Architecture

The .us Strict Liability Trap

Under the US Department of Commerce National Telecommunications and Information Administration (NTIA) mandate, registry operator Registry Services LLC (formerly Neustar) performs continuous automated sweeps for WHOIS proxy patterns. Any .us domain utilizing privacy protection is subject to immediate registry takedown without prior cure notice.

The ICANN EPDP Framework

Implemented in May 2018 in response to European Union General Data Protection Regulation (GDPR) Article 6, the Expedited Policy Development Process established that public RDAP/WHOIS responses must redact the personal name, street address, telephone number, and direct email address of natural persons across all gTLD registries.

Registration Data Request Service (RDRS)

Launched by ICANN in November 2023, the Registration Data Request Service provides a standardized single-pane portal for trademark holders, consumer protection agencies, and cybersecurity researchers to submit lawful, authenticated requests for un-redacted registrant data directly to accredited registrars.