NIS2 directive (proposal): duties of domain name registries and registrars

The proposed NIS2 directive (CELEX 52020PC0823) would transform the legal position of domain name registries and registrars by classifying them among the 'essential entities' responsible for the security of the DNS. The article details the resulting duties: maintaining complete, accurate and verified registration (WHOIS) databases, and making the data available without undue delay, in a manner compatible with the GDPR. It highlights the most consequential lever — public policies to guarantee data accuracy, potentially through systematic identity verification or a ban on prepaid cards, which would end registration anonymity — and the personal liability regime for those who fail to ensure compliance. Read alongside the recitals on DNS trust and resilience, the proposal signals the EU's intent to make the naming infrastructure accountable, with obvious benefits for rights holders seeking to identify infringers.

COSHIELD: The Scope of the UDRP in Trademark Disputes

Not every dispute involving a trade mark and a domain name amounts to cybersquatting. In Polyco Healthline Limited v. David Beatson (WIPO Case No. D2026-1893), the panelist denied the complaint brought against coshield.com, a domain used since 2020 to sell personal protective equipment in the very sector where the complainant has exploited its SHIELD trade mark since 1997, and despite a settlement agreement concluded between the parties in 2021. The decision turns on the moment of acquisition: created in 2014, the domain name appears to have changed hands in May 2020, at the outset of the COVID-19 pandemic, and the combination of “Co” and “Shield” could describe the business rather than target Polyco. The evidence being “finely balanced”, bad faith was not established. This article examines why trade mark infringement and cybersquatting are two paths that do not necessarily converge.

23 August 2026
Initially published on iptwins.com

Football Clubs and Cybersquatting: When a Domain Name Becomes the Infrastructure of Abuse

Football clubs have become prime targets for cybersquatters, but abusive domain names are no longer used merely to divert web traffic or exploit a club's reputation. Increasingly, they form part of a broader criminal infrastructure supporting phishing campaigns, counterfeit merchandise, fake ticket sales, fraudulent streaming platforms, cryptocurrency scams and other forms of online fraud. Drawing on an analysis of more than one hundred UDRP decisions involving football clubs from around the world, this article identifies the principal patterns of abuse, the domain name strategies adopted by cybersquatters, and the legal reasoning developed by UDRP panels. It highlights how attackers exploit supporters' trust by combining famous club names with terms relating to tickets, official stores, memberships, academies, streaming services or digital assets. Beyond the case law, the article argues that domain names have become a critical component of cybercrime ecosystems. It therefore examines the practical implications for brand owners and rights holders, emphasizing the importance of proactive domain name strategies, continuous monitoring and rapid enforcement mechanisms. The article concludes with practical recommendations to help football clubs and other rights holders strengthen their online brand protection in an increasingly complex digital environment.

19 July 2026
Initially published on iptwins.com

Online Trademark Infringement: When the Corporate Veil Does Not Shield the Director

In a judgment of 7 October 2026 (No. 25-14.170), designated for publication in the Bulletin and the Rapport, the Commercial Chamber of the French Court of Cassation clarified when the manager of an SARL may be held personally liable for trademark infringement committed through the company's e-commerce website. First, the civil court must determine whether the acts personally attributed to the manager constitute the intentional criminal offence of trademark infringement under Article L. 716-10 of the French Intellectual Property Code. If they do, the offence is misconduct separable from corporate duties under Article L. 223-22 of the Commercial Code, and no prior criminal conviction is needed. Second, the manager's refusal to ensure compliance with a court order requiring the company to produce accounting and commercial documents is itself separable misconduct, even though the order was addressed to the company and not to him. Rights holders thus have two independent routes to the director's personal liability.

26 October 2026
Initially published on iptwins.com

Rush and Distribution: A Sector Map of the 2026 Reveal Day

On 7 October 2026, ICANN published the applications filed in the first new gTLD round since 2012: 1,614 primary applications for 986 distinct strings, submitted by 480 entities. That is fewer than in 2012 (1,930 applications for 1,409 strings), with evaluation fees now at USD 227,000, but the round is more contested: 55% of applications face a competitor, against 39% in 2012. Assigning each string to a sector reveals a demand driven by digital technology. Artificial intelligence is the most fiercely disputed sector, with .AGENT drawing thirteen applicants, and the leading AI companies have secured their own names. Brands have responded with restraint: 333 .BRAND applications, one in five, only nine of them French. Geographic names, so prominent in 2012, have almost disappeared, while niches such as health and the professions are emerging, including a community application for .AVOCAT. For trademark owners, the priority is to screen the list before the objection period opens on 17 November 2026.

9 October 2026
Initially published on iptwins.com

Article Information

Author

Emmanuel Gillet

Publication Date

5 November 2021

Jurisdiction

Industry

Related Decision(s)

Please select listing to show.

Filter articles

Filter for Topics
Filter for Industries
Filter for Jurisdictions