NIS2 and your domains: what you need to know
The Directive (EU) 2022/2555 (NIS2) strengthens the security of European digital infrastructures and pays special attention to domain name-related services.
As a domain registrar, one of the most relevant changes for our clients is the need for contact data associated with domains to be correct, complete, and permanently updated.
Why is it important?
When you register a domain, it becomes associated with a series of identifying data of the owner and their administrative and technical contacts.
This data allows:
- Identifying the legitimate owner of the domain.
- Quickly contacting the responsible party in case of security incidents.
- Resolving domain-related conflicts.
- Complying with legal and regulatory obligations.
- Reducing fraudulent use of domain names.
The NIS2 Directive considers that having reliable contact information is an essential element for improving the security of the Internet ecosystem.
What does NIS2 say?
NIS2 establishes that domain name registries and registrars must collect and maintain accurate and updated information about domain holders.
Additionally, they must implement reasonable procedures to verify this information and correct inaccurate data when necessary.
The objective is not to collect more information, but to ensure that the existing information is truthful and useful in case of an incident.
You can consult the official text of the Directive here:
https://eur-lex.europa.eu/eli/dir/2022/2555/oj
What does this mean for our clients?
At certain times, we may ask you to review or confirm the data associated with your domains.
For example:
- Name or business name.
- Identification document when applicable.
- Postal address.
- Email address.
- Phone number.
- Contact person.
In some cases, we may also request documentation to verify the identity of the holder or the representation of a company.
These checks are part of our obligations as a registrar and help protect both our clients and the Internet as a whole.
What happens if the data is not correct?
Maintaining incorrect or outdated information can cause various problems, including:
- Difficulties regaining control of the domain.
- Delays in managing incidents.
- Inability to contact the holder.
- Temporary suspension of certain services when required by regulations or the corresponding registry.
- Breach of the domain registration conditions.
For this reason, it is important to periodically review the information associated with each domain.
What do we recommend?
To avoid incidents, we recommend:
- Regularly reviewing the holder's data for all your domains.
- Keeping email addresses and contact numbers updated.
- Communicating any change in company, business name, or address.
- Using an email address that you regularly check.
- Responding to validation or update requests that we may send you.
These simple actions help protect your domains and facilitate any future management.
Our commitment
As a domain registrar, we work to comply with the requirements established by European regulations and the various domain registries.
When we ask you to confirm or update the data of a domain, it is not just an administrative formality: it is a measure aimed at improving security, preventing fraud, and ensuring that the domain can continue to be managed by its legitimate holder.
We appreciate your cooperation in keeping your domain information updated.
More information
Directive (EU) 2022/2555 (NIS2)
https://eur-lex.europa.eu/eli/dir/2022/2555/oj
European Commission Portal on NIS2
https://digital-strategy.ec.europa.eu/en/policies/nis2-directive
In summary
The validation of contact data is no longer just a good practice, but a key element in strengthening the security of the domain name system.
Keeping your domain information updated allows us to correctly identify the holder, respond quickly to any incident, and comply with the obligations established by European regulations, contributing to a safer Internet for everyone.
