ICANN’s Registration Data Request Service (RDRS), designed to facilitate access to private domain registration data, has raised eyebrows due to its significant operational costs. Launched as a two-year pilot in December 2023, RDRS aims to connect trademark owners, security researchers, law enforcement, and other entities with registrars to request redacted Whois data. However, an analysis of its first year of operation reveals that each request may cost hundreds—or even thousands—of dollars. Here’s a closer look at the numbers and implications.
How RDRS Works
The RDRS system was developed in response to privacy regulations such as GDPR, which mandated the redaction of personal information in public Whois records. Through RDRS, authorized entities can submit requests for access to this data by providing a legal justification and supporting documentation. The process is far more complex than a simple Whois lookup, requiring significant time and resources from both requesters and registrars.
The Financial Breakdown
ICANN invested $1.6 million in developing RDRS, with most of the budget allocated to internal staffing and external security testing. Operational costs for the first 10 months totaled $685,000. While financial reports for the final quarter of 2024 are pending, it’s estimated that the first year of operation cost approximately $800,000.
Despite these investments, demand for the service has been relatively low:
- Registered Requesters: 7,871 (as of November 2024)
- Requests Submitted: 2,260
- Requests Closed: 2,057
- Approved Requests: 474 (23% approval rate)
Cost Per Request
Using generous assumptions:
- Operational costs divided by total requests yield $303 per request.
- Including half of the development costs (for a two-year pilot), the cost rises to $666 per request.
- When considering only approved requests, the cost skyrockets to $3,181 per successful lookup.
Who’s Using RDRS?
ICANN’s transparency reports reveal that intellectual property (IP) holders account for 29.7% of requests, while law enforcement agencies represent 15.6%. Other users include cybersecurity professionals and researchers. While some may argue that assisting corporate trademark enforcement isn’t worth the high costs, others see value in supporting law enforcement efforts against serious crimes like drug trafficking or child exploitation.
Challenges and Implications
For registrars and requesters alike, using RDRS is no small task. The process involves lengthy forms, detailed legal arguments, and additional documentation—all of which require trained personnel and time-consuming effort. These hidden costs compound the already high price tag associated with each lookup.
The system’s low usage rates also raise questions about its long-term viability. If demand doesn’t increase significantly, the cost per request will remain prohibitively high. ICANN’s board is expected to decide later this year whether to continue RDRS beyond its pilot phase.
Is It Worth It?
The debate over RDRS boils down to its perceived value. Critics argue that spending over $3,000 per successful Whois lookup is an inefficient use of resources—particularly when many requests come from private companies seeking to enforce trademarks. Proponents counter that if even a fraction of these lookups help law enforcement combat serious crimes, the investment is justified.
Looking Ahead
As ICANN evaluates the success of RDRS in late 2025, several factors will likely influence its decision:
- Demand Growth: Will usage rates increase enough to lower per-request costs?
- Efficacy: Does RDRS effectively balance privacy concerns with legitimate access needs?
- Stakeholder Feedback: How do registrars, requesters, and other stakeholders view the system?
Ultimately, ICANN must weigh the financial burden against the potential societal benefits of maintaining a secure and accessible system for domain registration data.