> When buying a domain you do so in ICANN's jurisdiction, under their terms.
Contract doesn't trump law, and ICANN isn't a supernation that excludes actual sovereigns from governing behavior relating to it.
> And if that isn't enough, ICANN can fix this without compromise. One mass email. "Respond expressly allowing us to publish your PII, or lose your domain."
No, it can't, IIRC, because GDPR specifically excludes this kind of “agree or no service” from qualifying as effective consent.
Contract doesn't trump law, and ICANN isn't a supernation that excludes actual sovereigns from governing behavior relating to it.
> And if that isn't enough, ICANN can fix this without compromise. One mass email. "Respond expressly allowing us to publish your PII, or lose your domain."
No, it can't, IIRC, because GDPR specifically excludes this kind of “agree or no service” from qualifying as effective consent.