The Internet Corporation for Assigned Names and Numbers (ICANN), a non-profit organization based in Los Angeles, has announced plans to make domain registrars more accountable for those who sign up and register internet domains. WHOIS, the public domain name database of all registrants, will soon require that all new domain owners verify their identities with either a phone number or an email address within 15 days of applying for a new domain. Anyone who fails to do so would see their newly registered domain suspended.

The changes have come to light following the publication of a new, fifty-page Accreditation Agreement (RAA), which was approved earlier this week by ICANN’s board of directors. In the report, ICANN identifies a number of principles and design features that it says are essential to its proposed, next-generation data directory service.

According to the report, the rules are designed to make the “often-inaccurate WHOIS data on domain registrations should be a bit more reliable, while deterring those looking to set up websites for illicit purposes,” says The Verge. As part of the proposed changes, domain registrars like GoDaddy would be held responsible for collecting and verifying the identity of those who sign up for web domains. The plan calls for users to verify either their phone number or an email address within 15 days of applying for a new domain. Should anyone fail to provide verification, registrars would be required to suspend that domain until they do so. Aside from this, registrars would also be required to maintain a database of information on registrants, including the IP addresses and credit card details of domain seekers, for a period of two years.

Jean-Francois Baril, lead facilitator of the ICANN expert working group, told Internet Retailer that, “It not only reexamines how data is collected and maintained, but also how the data is best safeguarded against illegitimate uses.”

Aside from these changes, ICANN is also recommending that a new ‘aggregated registration data service’, operated by an independent service provider be created, charged with validating registrants data and protecting it from abuse.

Of course, none of this answers the question that’s really on everyone’s lips. Why are they doing this? Sure the odd person might use WHOIS to try to find the owner of a domain they wish to buy, but in reality 99% of people who use it are just telemarketers and spammers looking for new ‘victims’ to latch onto. ICANN’s forcing people to provide their ‘true’ information will only lead to an even greater invasion of privacy for anyone who signs up for a new web domain. And as for deterring people from using a website for illicit purposes – well I don’t think an experienced cybercriminal is going to be put off by the need to create a new email account to register their new domain.

Moreover, one has to question ICANN’s timing over this announcement, which comes hot on the heels of the NSA/PRISM revelations. US organizations don’t exactly command the highest level of trust right now, and more than a few people might be concerned that this is just a play to make sure ICANN keeps better records for law enforcement.