GoDaddy threatens India exit over Whois data ruling

GoDaddy has signaled potential withdrawal from the Indian market following a court decision that compels registrars to disclose registrant identities to entities claiming "legitimate interests." The company filed a 5,000-page appeal in India’s High Court, arguing the ruling creates operational and privacy risks for its customers. Two other registrars, Namecheap and Hosting Concepts, have also challenged the order, which emerged from lawsuits filed by 20 multinational corporations seeking to combat cybersquatting and brand impersonation.

What the ruling requires

The December 2025 court order mandates that registrars provide Whois or RDAP records within 72 hours to parties demonstrating a "legitimate interest." The plaintiffs—including Amazon, Microsoft, and McDonald’s—argue the measure is necessary to curb fraud, phishing, and trademark infringement. However, GoDaddy contends the ruling lacks clear criteria for determining legitimate interest, placing registrars in an untenable position. The company’s appeal warns that compliance could expose registrants to security risks, including harassment or identity theft.

ICANN’s existing policies already address disclosure of registration data, but these primarily target DNS abuse such as malware and phishing. The Indian court’s ruling expands the scope to include intellectual property infringement and fraud, areas where ICANN’s guidelines are less prescriptive. This discrepancy has raised concerns among registrars about conflicting legal obligations across jurisdictions.

Industry and regulatory tensions

The case highlights broader tensions between privacy protections and brand enforcement in domain registration. Registrars have long resisted blanket disclosure requirements, citing GDPR and other data protection laws that restrict access to personal information. GoDaddy’s appeal frames the Indian ruling as incompatible with these global standards, arguing that it forces registrars to choose between legal compliance and customer privacy.

Namecheap and Hosting Concepts, which also operate in India, have joined the legal challenge, suggesting the ruling could set a precedent affecting the entire industry. If upheld, the decision may pressure other registrars to adopt similar disclosure practices, potentially undermining the privacy safeguards established under ICANN’s Temporary Specification for gTLD Registration Data.

What to watch

The outcome of GoDaddy’s appeal could reshape registrar operations in India, particularly if the court upholds the ruling without clarifying the definition of "legitimate interest." Registrars may face increased legal exposure if forced to adjudicate disclosure requests without clear guidelines. Meanwhile, brand owners are likely to push for similar measures in other jurisdictions, raising the stakes for global domain policy.

For now, GoDaddy’s threat to exit India remains contingent on the appeal’s resolution. The case underscores the challenges registrars face in balancing compliance with local laws and adherence to international privacy standards.