> The EU is currently drafting legislation to increase cyber security (revised NIS Directive, in short “NIS 2”). According to this directive, the registration of internet domain names will in future require the correct identification of the owner in the Whois database, including name, address and telephone number. So far, registries such as denic do not register telephone numbers of the holders. The leading Industry Committee wants to additionally mandate „verification“ of the registration data. The plans could mean the end of “whois privacy” services for proxy registration of domains, threatening the safety of activists and whistleblowers.[1]
Proxy registration referred to in that quote isn't what Whois privacy generally refers to though, no?
When I've seen it used by typical registrars it has meant that the owner's details aren't disclosed on public Whois lookups but are still required to be correct.
Yes, the current status is that the GDPR basically outlaws whois as "Domain holders must publish public contact information". ICANN's plan B, after failing to fight that requirement, is that registrars must hold contact information and provide it to parties with legitimate interests. The EU privacy regulators have been clear in their interpretation that IP lawyers do not have sufficient "legitimate interests" to be party to such a system, though they are ok with law enforcement having access. Part of that argument is IP lawyers are such a broad group as to make the information de facto public.
Anyway, this proposal seems to be basically a GDPR exception to make "whois" in some form allowable, which is backsliding on the current state.
[1] https://www.patrick-breyer.de/en/cybersecurity-eu-to-ban-ano...