Domain law glossary: exequatur, UDRP, RDAP and more

The test for intermediary liability in Law 51 of 2008 (arts. 87–91). An intermediary has actual knowledge once a competent authority has declared content unlawful, ordered its removal, and the intermediary knows of that decision. A private complaint does not create it. See Panama domain law.

The Autoridad Nacional de Transparencia y Acceso a la Información, Panama's data protection regulator under Law 81 of 2019. It hears complaints from data subjects, rules on inaccurate data, keeps the register of transfers and imposes sanctions. See Panama domain law.

A request for data not tied to named domains or persons, such as every customer of a registrar. Article 24 of Panama's Law 81 of 2019 says bulk requests are never admitted. We refuse them, whoever sends them. See data disclosure.

A written decision of a Panamanian judge requiring a measure: suspension, transfer, lock or release of data. It is the basis of our policy. We confirm every order with the court that issued it before acting. See court orders.

The procedure by which a Panamanian court recognises a foreign judgment so that it can be enforced in Panama. Under Law 61 of 2015 (arts. 155–157), the Sala Cuarta of the Supreme Court decides, applying four conditions. Without it, a foreign judgment does not bind us. See court orders.

An order of the Ministerio Público, created by Law 478 of 2025, requiring a custodian to keep specified data for up to 90 days, renewable. The custodian must keep the order confidential. It freezes data; it does not release it. See law enforcement.

A court action under article 44 of the Constitution of Panama. It lets a person have their data corrected, updated, deleted or kept confidential, including in private registers kept by businesses that serve the public. See Panama domain law.

Panama's public prosecution service, headed by the Procurador General de la Nación. Since Law 478 of 2025, it may order the preservation (CPP art. 338-A) or production (art. 338-C) of computer data. We treat such orders as binding Panamanian process. See court orders.

An order by which the Ministerio Público requires a person or company to supply computer data in its possession or control, including subscriber data. Article 338-C was added by Law 478 of 4 August 2025. We verify it, comply, and count it separately. See data disclosure.

The Fourth Chamber, for General Affairs, of Panama's Supreme Court of Justice. Under article 157 of Law 61 of 2015, it hears exequatur applications for foreign judgments. It gives five days to the party bound and to the Procurador General. See court orders.

A national office reachable at any hour for urgent cybercrime cooperation, as the Budapest Convention requires. In Panama, Law 11 of 2015, as amended by Law 478 of 2025, has it designated by the Procurador General. Foreign preservation requests go through it. See law enforcement.

The Council of Europe Convention on Cybercrime (ETS 185), the main treaty on electronic evidence between States. Panama deposited its accession on 5 March 2014, and the Convention took effect for Panama on 1 July 2014. See law enforcement.

A formal request from a court in one country to a court in another to perform a judicial act, such as serving papers or taking evidence. Between American States it follows the Inter-American Convention on Letters Rogatory (OAS B-36), ratified by Panama in 1975. See court orders.

A mutual legal assistance treaty: an agreement for cooperation between States in criminal cases. The US–Panama MLAT was signed on 11 April 1991 and has been in force since 6 September 1995. US requests for our data go through it. See law enforcement.

A lawsuit brought against a thing, here a domain name, rather than against its holder. United States trademark law allows it for domain names (15 U.S.C. §1125(d)(2)): the case is filed where the registrar or the registry is located, and the court can order the name forfeited, cancelled or transferred. That is why the registry's country matters. See can a foreign court seize my domain?.

A password-like code that the current registrar issues so that a domain can be transferred to another registrar. At PanamaRegistrar, the auth code is free, from your account, at any time, except in the 60 days after a registration or a transfer (ICANN Transfer Policy) and while a UDRP or court lock applies, with no exit fee. See the FAQ.

The person who controls and uses a domain when someone else is the registrant of record. With Domain protection, our company is the registrant of record and the customer stays the beneficial owner, with full control and a free transfer code. See Domain protection.

A regular deposit of registration data with an ICANN-approved escrow agent, required of every accredited registrar for generic domains; for our domains, our registrar partner makes it. If a registrar stops operating, the data lets another registrar take over its domains. See data disclosure.

The Internet Corporation for Assigned Names and Numbers, the body that accredits registrars for generic domains such as .com and sets their duties by contract. Its rules apply to every accredited registrar, whatever its country. See Panama domain law.

A service that replaces the registrant's details in public WHOIS/RDAP output with a contact of the provider, while the customer stays the registrant. At PanamaRegistrar it is free wherever the registry allows it. See what we hold.

A registration in which the provider itself is the registrant of record and licenses the domain's use to the customer. ICANN's RAA §3.7.7.3 governs the liability this creates. Our version is called Domain protection. See Domain protection.

The contract between ICANN and each accredited registrar, in its 2013 version with later amendments. It sets duties on email verification, abuse handling (§3.18), data escrow and proxy registrations (§3.7.7.3). See data disclosure.

The Registration Data Access Protocol, the structured successor to WHOIS. Since 28 January 2025, ICANN no longer requires WHOIS for generic domains, and RDAP is the reference service. Lookups are free at lookup.icann.org. See what we hold.

ICANN's Registration Data Request Service, a voluntary system for asking registrars to disclose non-public data. Its pilot ran from November 2023 to November 2025 and handled more than 3,700 requests. See data disclosure.

The person or company named as holder of a domain in the registry's database. It is the party a UDRP complaint names. With Domain protection, the registrant of record is DomaineGoat LLC. See Domain protection.

A company accredited to register domains with registries on behalf of customers; ICANN accredits registrars for generic domains. PanamaRegistrar is not one: it is a brand of DomaineGoat LLC, a company incorporated in Panama, and its domains are registered through an ICANN-accredited registrar partner, shown in the RDAP record. See registrar vs registry vs host.

ICANN's policy on what registration data is collected, published and disclosed, effective since 21 August 2025. A 12 May 2026 update adds a 24-hour response to urgent requests, pending a law-enforcement authentication mechanism. See data disclosure.

The organisation that runs an extension's database and sets its rules, such as Verisign for .com or DENIC for .de. Each registry keeps its own copy of every registration and applies its own country's law. See registry jurisdiction.

A company that sells domain registrations under an accredited registrar's accreditation, without its own. ICANN's RAA (§3.12) makes the registrar impose its rules on resellers. PanamaRegistrar works this way, with its own Panamanian rules for the accounts and data it holds. See registrar vs registry vs host.

A status (clientTransferProhibited) that blocks moving a domain to another registrar until it is removed. With Domain protection, the lock is on by default, and any transfer or DNS change must be confirmed from the account. See Domain protection.

The older protocol and service for looking up who holds a domain. For generic domains, it has been replaced by RDAP since 28 January 2025. Personal data is no longer published by default. See what we hold.

Statuses that remove a domain from the DNS, so it stops resolving. The registrar sets clientHold; the registry sets serverHold, which a registrar cannot lift. A suspension by us is a clientHold, set by our registrar partner at our request. See takedown procedure.

Child sexual abuse material, called "material de abuso sexual infantil" in Panama's Penal Code (arts. 184–185, amended by Law 478 of 2025). We suspend a domain carrying it immediately, and the URLs are reported to NCMEC. See report abuse.

The Digital Millennium Copyright Act, a United States law that includes a notice-and-takedown procedure for service providers. It is not Panamanian law. We forward DMCA notices to the holder and act only on a Panamanian court decision. See DMCA notices.

In ICANN's contracts, malware, botnets, phishing, pharming, and spam when it carries one of those. Since 5 April 2024, RAA §3.18.2 requires prompt mitigation once a registrar has actionable evidence. We add fraud that takes money from victims. See report abuse.

A procedure in which a private notice obliges a provider to remove content to keep its liability shield. We found none in Panama's copyright Law 64 of 2012. Under Law 51 of 2008, an authority's decision is needed. See takedown procedure.

Our public count of complaints, court orders, data requests by country, UDRP and URS cases, and strict-exception suspensions. It is published every quarter; the first, in January 2027, covers launch to 31 December 2026. See transparency.

The abuses we act on without waiting for a court, on a well-documented report: phishing (including pharming), malware, botnets, child sexual abuse material, and fraud that takes money from victims. Spam counts only when it carries one of these. Phishing, malware and fraud are suspended within 24 hours of a well-documented report. See report abuse.

The Uniform Domain-Name Dispute-Resolution Policy, ICANN's procedure for trademark disputes over generic domains. On the provider's request, the registrar locks the domain within 2 business days and later applies the panel's decision. See UDRP and URS.

The Uniform Rapid Suspension System, a faster trademark procedure for new generic domains. The registry locks the domain within 24 hours, the holder has 14 days to respond, and the complainant needs clear and convincing evidence. See UDRP and URS.