In our public comments, we highlighted that the use of domain names to commit various online abuses continues to be a growing concern for law enforcement, cyber security professionals, and intellectual property owners; that there is a compelling public interest for access to identifying information and contact data for the beneficial owner of a domain name to combat such abuses; that ensuring the accuracy of, and lawful access to, this data is critical for enforcement of laws and private rights of action; and that this should be recognized in the GDPR—particularly as to personal contact information that is used for commercial purposes.