[arin-ppml] LAST CALL - Recommended Draft Policy ARIN-2017-12: Require New POC Validation Upon Reassignment

[ARIN]

The ARIN Advisory Council (AC) met on 18 April 2018 and decided to send 
the following Recommended Draft Policy to Last Call:

ARIN-2017-12: Require New POC Validation Upon Reassignment

Feedback is encouraged during the Last Call period. All comments should 
be provided to the Public Policy Mailing List. Last Call will expire on 
7 May 2018.

The Recommended Draft Policy text is below and available at:
https://www.arin.net/policy/proposals/

The ARIN Policy Development Process is available at:
https://www.arin.net/policy/pdp.html

Regards,

Sean Hopkins
Policy Analyst
American Registry for Internet Numbers (ARIN)



Recommended Draft Policy ARIN-2017-12: Require New POC Validation Upon 
Reassignment

AC Assessment of Conformance with the Principles of Internet Number 
Resource Policy:

Recommended Draft Policy ARIN 2017-12 contributes to fair and impartial 
number resources administration by making it easier for ARIN to contact 
the correct individuals who perform the POC functions for reassigned 
resources, in conjunction with ARIN's administration of those resources. 
It is technically sound in that it ensures that the correct POCs for 
reassigned numbering resources are associated with those resources. 
There is significant community support for this recommended draft policy 
as written.

Problem Statement:

Some large ISPs assign individuals to be POCs for reassigned blocks 
without consultation of the individual they are inserting into Whois. 
For example, during the reassignment/reallocation process, some large 
ISPs automatically create POCs from their customer's order form. This 
process is automated for many ISPs and therefore the resulting POCs are 
not validated prior to being created in the ARIN Whois database. This 
creates unknowing POCs that have no idea what Whois is or even who ARIN 
is at the time they receive the annual POC validation email. It can also 
create multiple POCs per email address causing that same person to 
receive a multitude of POC Validation emails each year.

This policy proposal seeks to improve the situation where a POC is 
unwittingly and unintentionally inserted into Whois.

It also seeks to mitigate the significant amount of time that ARIN staff 
reports that they spend fielding phone calls from POCs who have no idea 
they are in Whois.

Finally, it is hopeful that this proposal will improve the overall POC 
validation situation, by forcing ISPs and customers to work together to 
insert proper information into Whois at the time of sub-delegation.

Policy statement:

Insert one new section into NRPM 3:

3.7 New POC Validation Upon Reassignment

When an ISP submits a valid reallocation or detailed reassignment 
request to ARIN which would result in a new POC object being created, 
ARIN must (before otherwise approving the request) contact the new POC 
by email for validation. ARIN's notification will, at a minimum, notify 
the POC of:

- the information about the organization submitting the record; and
- the resource(s) to which the POC is being attached; and
- the organization(s) to which the POC is being attached.

If the POC validates the request, the request shall be accepted by ARIN 
and the new objects inserted into Whois.  If the POC does not validate 
the request within 10 days, ARIN must reject the request.

Timetable for implementation: Immediate