Obligation to grant access

(1) Top Level Domain Name Registries and domain name registry service providers must grant an authorised access requester, on a reasoned application demonstrating a legitimate interest and insofar as necessary for performing its tasks, access to the domain name registration data without delay and in any event within 72 hours of receipt of the application. Where the requested information is not available, this must be communicated within 24 hours of receipt of the application for access.
(2) Top Level Domain Name Registries and domain name registry service providers must make the requirements and procedures for disclosing domain name registration data publicly accessible by 6 March 2026.
(3) The disclosure procedure for subscriber data under section 22 of the Telecommunications and Digital Services Data Protection Act remains unaffected.
(4) The BSI may review compliance with the requirements.