Revised - Draft Policy ARIN-2018-5: Disallow Third-party Organization Record Creation

[ARIN]

The following has been revised:

* Draft Policy ARIN-2018-5: Disallow Third-party Organization Record 
Creation

Revised text is below and can be found at:
https://www.arin.net/policy/proposals/2018_5.html

You are encouraged to discuss all Draft Policies on PPML. The AC will 
evaluate the discussion in order to assess the conformance of this draft 
policy with ARIN's Principles of Internet number resource policy as 
stated in the Policy Development Process (PDP). Specifically, these 
principles are:

* Enabling Fair and Impartial Number Resource Administration
* Technically Sound
* Supported by the Community

The PDP can be found at:
https://www.arin.net/policy/pdp.html

Draft Policies and Proposals under discussion can be found at:
https://www.arin.net/policy/proposals/index.html

Regards,

Sean Hopkins
Policy Analyst
American Registry for Internet Numbers (ARIN)



Draft Policy ARIN-2018-5: Disallow Third-party Organization Record Creation

Problem Statement:

Since the introduction of simple-reassignment some years ago, it is no 
longer necessary to allow for third-parties (such as upstream ISPs) to 
create organization records for another entity (such as their 
customers).  In particular, many entities find that spurious 
organization records are routinely created in their name, causing both 
confusion and entity + staff time for clean-up.

Therefore, this policy establishes that organization records shall be 
created only by the entity represented by the organization record, and 
should be created only through an explicit request to ARIN.  ISPs 
wishing to reassign space to customers should either ask the customer 
for their ORG-ID or shall use the "simple reassignment" method which 
does not require nor create new organization records.  ISPs wishing to 
reallocate space to customers should ask the customer for their ORG-ID.

Policy Statement:

Add new section(s) into the NRPM:

3.X Directory Service Records

3.X.1 Organization Record Creation

New organization records shall be created upon ARIN receiving a request 
directly from an authorized contact representing an entity that ARIN is 
able to validate.  Organization records shall not be created upon the 
request of third-parties.

Comments:

Timetable for implementation: Immediate