What is NIS2 and Article 28?
The NIS2 Directive is a European Union cybersecurity regulation that aims to strengthen the security of digital services and reduce abuse, including the use of false information when registering domains.
Article 28 of NIS2 requires domain registries and resellers to ensure that domain owner data is accurate, verifiable and up-to-date in order to improve trustworthiness and prevent fraud and cybercrime.
In connection with the European Union NIS2 Directive and the clarifications established by the .DE domain registry (DENIC), new requirements regarding the contact details of domain owners have entered into force and will soon enter into force. These changes affect all registrations and management of .DE domains.
Below is a summary of the main requirements and what this means for SpeedZone customers with .DE domains.
Accurate Contact Information
All new registrations, domain transfers, contact information changes, and ownership changes must include complete and accurate owner (registrant) information, including a valid phone number.
- Orders submitted without a valid phone number will fail.
- The use of sample data or fictitious information is not permitted.
Disclosure of WHOIS data for legal entities
If a domain is registered to a company name, the corresponding contact details are displayed in the public WHOIS.
We recommend using a role-based email address in the domain contact details (e.g. info@company.de, admin@company.de) to prevent personal email addresses from being included in the public WHOIS register and thus personal data (person’s name) from being disclosed.
Annual WHOIS Data Reminder
Once a year, an email is sent to the domain owner asking them to review and update their contact information if necessary.
Risk-based data verification and verification
If the domain registry suspects that the owner’s name or address is inaccurate, verification of the data may be required.
- SpeedZone may, if necessary, request further information from the domain registrant (personal identification, confirmation of mailing address, etc.).
- Unverified domains may be subject to deletion.
Phone Number Requirements for .DE Domains
For new registrations, transfers, and changes of ownership, a valid phone number is required immediately upon order placement.
Email address verification results are forwarded to the registry
Currently, email address verification is performed during domain registration, transfer, and ownership change. Starting April 14, 2026, failed email verifications will also be forwarded to the domain registry, which may trigger additional risk-based verification.