NZ Rules & Compliance

Where can I find the .nz rules?

You can find the .nz rules on the InternetNZ website

Who is responsible for monitoring and enforcing the .nz rules?

The Domain Name Commission (DNC) is responsible for regulating and enforcing the .nz rules.

The DNC website can be found here

How can I contact the Domain Name Commission (DNC)?

The best way to contact DNC is by email or via the contact form on their website

Domain holders can use the email address info@dnc.org.nz

Registrars should use the email address registrar@dnc.org.nz

What is a Compliance Lock?

The Domain Name Commission (DNC) applies a Compliance Lock when a domain name is under investigation for compliance with the nz Rules

  • A Compliance Lock prevents changes to the domain name.

  • The lock itself does not automatically suspend the domain from resolving.

  • DNCL may also choose to apply suspension (serverHold) at the same time, which removes the domain from the DNS zone so it no longer resolves.

Why would a Compliance Lock be applied?

Compliance Locks are usually applied during the Data Validation process when DNC is checking whether the Domain Name Holder’s details are correct and valid. Typical reasons include:

  • The Domain Name Holder (Registrant) cannot be contacted.

  • Registration details are incorrect, misleading, or incomplete.

  • The Domain Name Holder fails to provide identity verification when requested.

  • The Domain Name Holder does not meet eligibility requirements under the .nz Rules.

What happens to a domain under Compliance Lock?

When a domain has a Compliance Lock applied:

  • It cannot be transferred by a Registrar or Domain Name Holder.

    • Exception: DNC can authorise a Compliance Transfer.

  • It cannot be deleted.

    • Exception: DNC can authorise a Compliance Delete.

  • Domain details cannot be modified.

  • Domain lifecycle changes, such as renewals, and associated charges are suspended.

  • All associated contacts are copied and locked.

  • A service message is sent to the sponsoring Registrar explaining the lock.

If the DNC also selects the Suspend Domain option, the domain will be placed on serverHold and stop resolving.

How can I tell if a domain is under Compliance Lock?

  • DNS behaviour: If suspension has been applied, the domain will stop resolving. If only the lock has been applied, it may still resolve, but cannot be changed.

  • Notification: As the sponsoring Registrar, you will receive an email from DNC to your abuse contact email address when one of your domains has a Compliance Lock applied, including details of the issue and next steps for the Domain Name Holder.

  • IRS portal:

    • On the Edit Domain → Info panel, the Compliance Locked field will show as “Compliance Lock Locked.”

    • In the History section, the action is recorded as “domain compliance lock apply,” along with the date it was applied.

    • Clicking the Action ID shows the DNC reference number in the Comment field, which you can use if contacting DNC.

How can the lock be removed?

The Domain Name Holder (Registrant) must resolve the compliance issue with DNC:

  • They need to contact the DNC and verify their registration or identity details.

  • Once the issue is resolved, DNC will remove the lock (and lift suspension if it was applied).

Contact points for Compliance lock:

How can I see all of my domains which are Compliance Locked?

From the IRS portal you can search for domains which are Compliance Locked from the Domains page.

Once on the Domains page use the Search section at the top of the page.

  • Click the Advanced option

  • Use the drop down menu in the first field and select Domain Compliance Lock

  • That should automatically set the next field to equal and the last field to Locked

  • Click the Search button and your Compliance Locked domains wil be listed under the Domains section below