Home / Blogs

Privacy Alert: Watch Out For FOISA

Susan Crawford

This morning, at 10 am in 2141 Rayburn, the Subcommittee on Courts, the Internet, and Intellectual Property is holding a hearing on "Internet Domain Name Fraud — New Criminal and Civil Enforcement Tools." At that hearing, the Subcommittee will be considering a new Whois bill [PDF] creating new penalties for people who provide false data when registering a domain name.

We need to raise our collective eyebrows at this bill (which was suddenly dropped the evening before this hearing). The title of the bill is the "Fraudulent Online Identity Sanctions Act." (FOISA)

First of all, it includes in the category of "willful" trademark infringements those of a "violator. . [who] knowingly provided material and misleading false contact information to a domain name registrar. . ." This is significant, because monetary damages for trademark infringement can be increased up to three times if the infringement is willful — and usually "willful" is a question left up to a judge. It's also significant that there doesn't appear to be a necessary connection between what the violator has done and the whois data issue.

Secondly, the bill amends the Copyright Act by adding to the "willful" language for damages in that Act the idea that an infringement shall be considered to be willful where "the court finds that the infringer. . . knowingly provided material and misleading false contact information to a domain name registrar." Again, this is significant because willful copyright infringement can mean increased statutory damages awards of as much as $150,000. And the bill ties this amendment to cases of "infringement occuring at or in connection with an online location" — clearly broad language intended to get at P2P file trading. Again, usually courts decide "willfulness" on a case-by-case basis.

This is like sentencing guidelines for intellectual property law.

And, in fact, it is.

The final section of the bill adds a sentencing mandate for "falsification relating to domain names in connection with offenses." Maximum penalty: increased by 7 years if, "in furtherance of that offense," the defendant provided material and misleading false contact information to a registrar.

This is outrageous, and here's why. As a matter of ICANN policy, domain name registrants in gTLDs under contract with ICANN (with certain limited exceptions) are required to provide, and registrars are required to publish online, data about themselves — including phone numbers and email addresses for technical contacts. The vast majority of registrants in gTLDs are small businesses and individuals. Small businesses and individuals worry about privacy and spam, and it is well-known that WHOIS information is regularly mined by spammers.

It is already unfair to force registrants to provide all this data, and as a result many registrants do lie. IP interests view the WHOIS database (an artifact of a gentler, academic age, and not mandated by any law) as their special red telephone information mother lode. So they want to ensure its accuracy by mandating hugely enhanced damages if someone fails to tell the truth. Law enforcement also has this interest.

There are ways to help both IP interests and law enforcement to data by providing special access to approved entities. But it won't be accurate. It costs far too much money for registrars to verify this data, and individuals will, predictably, continue to lie.

As Officer Short Shrift says in the Phantom Tollbooth, we're all guilty, guilty, guilty, and should be sent away for six million years.

By Susan Crawford, Professor, Cardozo Law School in New York City. More blog posts from Susan Crawford can also be read here.

Related topics: DNS, Domain Names, ICANN, P2P, Privacy, Spam, Telecom, Top-Level Domains, Whois

 
   

Don't miss a thing – get the Weekly Wrap delivered to your inbox.

Comments

Re: Privacy Alert: Watch Out For FOISA dnslife  –  Feb 05, 2004 9:27 AM PDT

I'd like to see a battery of attorneys split hairs on the difference between false information and anonymous information regarding whois info.

www.heeger.us

Re: Privacy Alert: Watch Out For FOISA trashbug  –  Mar 24, 2005 4:23 PM PDT

99% (an unscientific but probably pretty accurate estimate) of all sites using Spam for advertising also use false information for their web site registration.

Small business owners can always use an email address that is unique to their registration form.  We already have laws in place to protect against telephone Spam.

Seven years isn't enough!

To post comments, please login or create an account.

Related Blogs

Related News

Explore Topics

Dig Deeper

DNS Security

Sponsored by Afilias

Cybersecurity

Sponsored by Verisign

IP Addressing

Sponsored by Avenue4 LLC

Mobile Internet

Sponsored by Afilias Mobile & Web Services

Promoted Posts

Buying or Selling IPv4 Addresses?

ACCELR/8 is a transformative IPv4 market solution developed by industry veterans Marc Lindsey and Janine Goodman that enables organizations buying or selling blocks as small as /20s to keep pace with the evolving demands of the market by applying processes that have delivered value for many of the largest market participants. more»

Industry Updates – Sponsored Posts

Domain Registrations Reach 331.9 Million, 6.7 Million Growth Year over Year

.brands Spotlight: Banking and Finance Industries

Google Buys Business.Site Domain for 'Google My Business'

Radix Announces Global Web Design Contest, F3.space

Global Domain Name Registrations Reach 330.6 Million, 1.3 Million Growth in First Quarter of 2017

.TECH Gets Its Big Hollywood Break

Verisign Named to the Online Trust Alliance's 2017 Audit and Honor Roll

Why the Record Number of Reverse Domain Name Hijacking UDRP Filings in 2016?

UDRP: Better Late than Never - ICA Applauds WIPO for Removing Misguided 'Retroactive Bad Faith'

The Rise and Fall of the UDRP Theory of 'Retroactive Bad Faith'

.PRESS Supports Press Freedom Day for 3rd Consecutive Year

5 Afilias Top Level Domains Now Licensed for Sale in China

Radix Announces Largest New gTLD Sale with Casino.Online

2016 Year in Review: The Trending Keywords in .COM and .NET Domain Registrations

Global Domain Name Registrations Reach 329.3 Million, 2.3 Million Growth in Last Quarter of 2016

A Look at How the New .SPACE TLD Has Performed Over the Past 2 Years

Neustar to be Acquired by Private Investment Group Led by Golden Gate Capital

Startup League Reports from WebSummit, Lisbon

2016 U.S. Election: An Internet Forecast

.SPACE Becomes the Choice of the First Ever Space Nation Asgardia