1. How the FTC Uses Whois Data Maneesha Mithal Montreal, Canada June 2003

2. Topics Background re FTC Background re FTC How we use Whois data How we use Whois data FTC’s position on Whois data FTC’s position on Whois data

3. Background about the FTC Only agency with jurisdiction over competition and consumer protection. Only agency with jurisdiction over competition and consumer protection. On the consumer protection side, we are charged with protecting consumers from unfair, fraudulent, and deceptive practices. On the consumer protection side, we are charged with protecting consumers from unfair, fraudulent, and deceptive practices. This includes Internet fraud. This includes Internet fraud. We are a civil agency. We are a civil agency. –We obtain injunctions. –We seek consumer redress.

4. Overview of Internet fraud efforts Fighting fraud is important Fighting fraud is important –To address consumer injury –To build consumer confidence Since 1994, we have brought over 250 law enforcement actions involving Internet fraud against over 700 defendants, stopping over $2.1 billion in consumer injury. Since 1994, we have brought over 250 law enforcement actions involving Internet fraud against over 700 defendants, stopping over $2.1 billion in consumer injury. Internet fraud harms consumers. Internet fraud harms consumers.

5. How we use Whois data To identify where a perpetrator is located To identify where a perpetrator is located –TLD case

6. How we use Whois data To serve process To serve process –BTV case

7. How we use Whois data To get investigative leads To get investigative leads –Premier Escrow case –We found registrar, web-hosting company, and asked for more info

8. How we use Whois data To conduct surfs To conduct surfs –We find e-mail addresses is through the Whois database.

9. FTC Testimony We summarized ways we use Whois data, concerns about inaccuracies, gave examples We summarized ways we use Whois data, concerns about inaccuracies, gave examples 3 conclusions: 3 conclusions: –Law enforcement agencies should have access to all Whois data –Public should have access to Whois data about commercial sites –For noncommercial sites, we recognize privacy concerns with public availability, and want to continue to work with stakeholders on this issue. Searchability Searchability