gTLD	Full Legal Name	E-mail suffix	Detail
.study	OPEN UNIVERSITIES AUSTRALIA PTY LTD	ngtld.webcentral.com.au	View

18(B)I. WHAT IS THE GOAL OF YOUR PROPOSED gTLD IN TERMS OF AREAS OF SPECIALTY, SERVICE LEVELS OR REPUTATION?

The key goals of the proposed new .study gTLD are in line with ICANN’s Affirmation of Commitments: to promote consumer trust, competition and consumer choice. OUA also seeks to foster its reputation as the leading provider of its online learning services and provide an authoritative internet space through which OUA and its affiliates are able to communicate with its users directly and effectively. Acknowledged within the Australian market for its online innovation, OUA aims to use the proposed .study gTLD to leverage its market leadership position as an online learning space and drive traffic and business growth for OUA by using .study as a trusted centre of targeted content and information about study options for its prospective students. The .study gTLD will allow its users to identify study topics more quickly and easily by matching their learning interest, career aspirations and lifestyles. OUA also plans to provide second level domain names such as open.study and university.study to assist in generating search-derived traffic for itself and its partner universities. Further, the ability to create personalised domain names on demand and domain names related to the individual study topics OUA provides will support these goals. Strengthened security measures, service levels and more effective functionality will provide a trusted and positive user experience.


18(B)II. WHAT DO YOU ANTICIPATE YOUR PROPOSED gTLD WILL ADD TO THE CURRENT SPACE, IN TERMS OF COMPETITION, DIFFERENTIATION, OR INNOVATION?

It is anticipated that the proposed .study gTLD will make positive contributions to the wider internet community, particularly in the online learning space, by providing:


DIFFERENTIATION (INCREASED TRUST):

The .study gTLD will simplify how internet users interact with OUA by providing a distinctive domain space specifically for open online learning. OUA anticipates that the .study gTLD will generate more search-derived traffic from users searching for study options. Such internet users will be able to directly navigate to the .study gTLD site to find the most relevant study option for their studies. By centralising accredited and certified study options, .study will facilitate its users’ decision-making process when investing in their education, saving them time and resources searching for the appropriate studying opportunity tailored to their needs. Further, OUA plans to increase its partnership with other educational institutions in Australia and overseas. The use of the .study gTLD may ultimately be adopted to regulate the education sector from a digital perspective. OUA seeks to establish a global standard in education by developing the .study gTLD to differentiate its offer in online learning among multiple providers. OUA already offers a unique model which enables students to study individual study topics and to commence study without the need for previous study, in most cases, via open entry. The current domain name system has shown that it is vulnerable to malicious abuses due to registration of domain names which seek to exploit consumer confusion. OUA can address some of these vulnerabilities by maintaining complete control over the domain names registered under the .study domain space. OUA intends to use .study to ensure that users are able to distinguish OUA’s selected network of education providers and the individual study topics they offer from counterfeiters. Together with consumer trust, internet users will be able to rely on the authoritativeness of the domain names under the .study domain space, which will differentiate interaction between internet users and OUA’s websites.


COMPETITION:

The differentiation of .study gTLD as a trusted online learning site for OUA will drive existing and new TLD registry operators and other education providers to make improvements in mechanisms to improve consumer trust of their TLDs. The ability to market OUA’s offer of individual study topics with the use of the .study gTLD will provide OUA a significant competitive edge as students wishing to find appropriate study options tailored to their needs will be encouraged to interact with domain names under the .study domain space. With a dedicated .study domain space, educational institutions and services providers in the education sector may have increased choices in the registration of domain names. As a result, .study will have a flow on effect to enable increased competition. Therefore, the benefits of the proposed .study gTLD will be distributed not only to its direct customers, but to the internet community at large forcing improved services in the market place.


INNOVATION:

With the expansion of the internet community to all corners of the world, the existing TLD structure presents limitations, not only in the availability of domain names for registrants, but also to businesses and organisations establishing a coherent global online brand presence to meet their evolving business needs. It is often difficult to register a domain name in existing domain space due to unavailability of the desired name. This problem is amplified for organisations such as OUA who work across many different jurisdictions and geographical markets. Even when the desired domain name is available, it may come with a high price tag associated with a purchase of such desired name from a third party or be ambiguous and fail to explain the nature of the organisation’s business. With .study, OUA has the ability to create second or third level domain names including the use of geographic names on demand which are relevant to its student base and the individual online study topics that OUA offers. By building its website and future websites with clear domain names such as openuniversities.study and country.study, OUA will be able to convey a clear message that it provides studying options from its partner universities and other accredited education providers. OUA will be able to combine its use of the domain space with innovative user focused marketing and services to address the currently unmet needs in the existing domain name system providing greater consumer choice.


18(B)III. WHAT GOALS DOES YOUR PROPOSED gTLD HAVE IN TERMS OF USER EXPERIENCE?

The proposed .study gTLD will provide a positive user experience, which meets the changing and growing needs of the global internet community. OUA will maintain control in the registration and use of domain names and will ensure that the new gTLD will only be used for purposes authorised by OUA. Therefore, the .study gTLD will:

- provide an easy and intuitive reference and access point for internet users searching for study options matching their learning interest or career aspirations;

- represent authenticity thus promoting user confidence;

- direct internet users to relevant information in a timely manner by creating domain names such as university.study on demand;

- allow the use of IDNs at a later stage to enable OUA’s current and prospective students to interact directly in their native language;

- use geographic names to localise OUA’s websites to connect with internet users in the relevant regions and to comply with local laws;

- enhance security and minimise security risks by implementing necessary technical and policy measures;

- strengthen brand reputation and user confidence by eliminating user confusion; and

- prevent potential abuses in the registration process reducing overall costs to businesses and users.


OUA intends to create relevant domain names for use including product, services or geographic names in the second or third level domain names. In accordance with the registration policy and the proposed measures for protection of geographic names as outlined in response to Question 22, OUA will use geographic names to localise its websites in the Australia and its main territories initially where OUA offers its online studies. OUA plans to expand the use of geographic names to other countries in the Asia Pacific and US regions at a later stage where OUA plans to expand its operations. The use of geographic names is intended to:

- connect internet users with relevant information as applicable to the territory; and

- comply with required rules and regulations in the relevant territory.


At this stage, OUA does not intend to utilise Internationalized Domain Names (IDNs) at the second level. However, as the use of the .study gTLD evolves, OUA may wish to utilise IDNs to allow internet users to engage with .study in their native language, creating a more positive user experience and encouraging diversity.

The .study gTLD should address the concerns that the current domain name system is open to potential malicious abuse and user confusion in the registration processes. Although the current system allows an eligible party to lodge a claim through existing Uniform Domain Name Dispute Resolution Policy (UDRP) or other dispute resolution processes, the .study gTLD will reduce potential abuses in the registration processes and overall costs to internet users. User confidence in the domain name system will be strengthened, which will ultimately contribute towards promoting ICANN’s core values in benefiting the public interest.


18(B)IV. PROVIDE A COMPLETE DESCRIPTION OF THE APPLICANTʹS INTENDED REGISTRATION POLICIES IN SUPPORT OF THE GOALS LISTED ABOVE.

The proposed registration policy is attached in response to Question 28.

Only OUA will be eligible to register domain names in .study at this stage. The domain name registration processes will address the requirements mandated by ICANN, including rights abuse prevention measures.


18(B)V. WILL YOUR PROPOSED GTLD IMPOSE ANY MEASURES FOR PROTECTING THE PRIVACY OR CONFIDENTIAL INFORMATION OF REGISTRANTS OR USERS? IF SO, PLEASE DESCRIBE ANY SUCH MEASURES.

OUA is committed to protection of privacy and confidential information in accordance with its objective of increasing consumer trust and providing a safe and legitimate internet space for internet users. Privacy and confidential information will be protected in accordance with all applicable laws and regulations relating to internet security, privacy and user’s confidential information including the Privacy Act 1988 (Australia).

Privacy is of fundamental concern to most of OUA’s students as such OUA has a strong interest in ensuring a high level of privacy protection for its users. OUA has implemented its own privacy policy that complies with the 10 National Privacy Principles (NPP) listed under the Privacy Act 1988 (Australia) to demonstrate its commitment to the protection of user privacy and confidential information. OUA’s privacy policy includes provisions regarding:

1. Collection of personal information (NPP 1 & 10): OUA will not collect any personal information unless it is necessary for its functions. OUA will inform a user of the purpose of such a collection when the information is needed.

2. Use and disclosure of personal information (NPP 2): OUA will only use the personal information collected for the purpose informed to the user or otherwise permitted by law.

3. Security and quality of personal information (NPP 3 & 4): OUA takes reasonable steps to ensure that the personal information in its collection is accurate, complete and up-to-date and protects the personal information from misuse, loss, unauthorised access, modification or disclosure.

4. Access to and correction of personal information (NPP 5 & 6): OUA allows its users to access their personal information and request for any correction of such information to be made.

5. Commonwealth Government Identifiers (NPP 7): OUA will issue its own identification numbers instead of using Commonwealth government identifiers (such as health insurance numbers) as its own identifier of individuals to protect the privacy of information provided by its users.

6. Anonymity (NPP 8): OUA allows users not to identify themselves when it is lawful and practicable to do so.

7. Transborder Data Flows (NPP 9): OUA complies with the requirements under law relating to transborder data flows.

8. Sensitive information (NPP 10): OUA will not collect sensitive information about its users without their consent unless permitted by law.


As the .study gTLD will only be available to OUA, initially, the amount of personal data that will be collected for the purposes of operating the gTLD and made publicly available in the WHOIS database will be very limited. OUA will provide a publicly available and searchable WHOIS look up facility, where information about the domain name status, registrant information including administrative and technical contact details can be found in accordance with Specification 4 of the Registry Agreement. In order to prevent misuse of the WHOIS look up facility, OUA will utilise measures including a requirement where any person submitting a WHOIS database query is required to read and agree to the terms and conditions in accordance with the registration policy. This will include the terms of use that the WHOIS database is provided for information purposes only and that the user agrees not to use the information for any other purposes such as allowing or enabling the transmission of unsolicited commercial advertising or other communication.

OUA will deploy Domain Name System Security Extensions (DNSSEC) which is intended to benefit both OUA and its users interacting with OUA online. DNSSEC provides additional security by validating information in the transmission, therefore it is intended to benefit those who publish information in the domain name system (DNS) and the users who retrieve information from the new .study gTLD. OUA already implements measures to protect privacy or confidential information of its users against misuse, loss, alteration and unauthorised access. Such measures include the use of Secure Sockets Layer (SSL) data encryption.

OUA will continue to apply all security measures currently implemented and will comply with all other policies and practices required by ICANN in the Registry Agreement and any relevant Consensus Policy for protecting the privacy and confidential information of registrants and users in the new .study domain space.


18(B)VI. DESCRIBE WHETHER AND IN WHAT WAYS OUTREACH AND COMMUNICATIONS WILL HELP TO ACHIEVE YOUR PROJECTED BENEFITS.

The proposed new gTLD will be publicised by a media plan to promote recognition of the new gTLD within the internet community to be a trusted site and as a sign of authenticity.

During the initial stage of the operation of the proposed new gTLD, it is anticipated that internet users may be re-directed to current websites. However, over time, it is foreseen that communication to the internet community of the existence of the proposed new gTLD and encouragement to utilise the trusted site will contribute towards minimising malicious abuses and protecting internet users.

gTLD	Full Legal Name	E-mail suffix	Detail
.netbank	COMMONWEALTH BANK OF AUSTRALIA	cba.com.au	View

18(B)I. WHAT IS THE GOAL OF YOUR PROPOSED gTLD IN TERMS OF AREAS OF SPECIALTY, SERVICE LEVELS OR REPUTATION?

The key goals of the proposed new .netbank gTLD are in line with ICANN’s Affirmation of Commitments: to promote consumer trust, competition and consumer choice. CBA also seeks to foster its online reputation and provide an authoritative internet space through which CBA is able to communicate with its customers directly and effectively. The .netbank domain space will strengthen CBA’s online brand reputation by enhancing security and providing authentic and memorable domain names that are relevant to customers. The ability to create domain names on demand related to specific marketing campaigns, specialty service and product development supports these goals. Strengthened security measures, service levels and more effective functionality will provide a trusted and positive user experience.


18(B)II. WHAT DO YOU ANTICIPATE YOUR PROPOSED gTLD WILL ADD TO THE CURRENT SPACE, IN TERMS OF COMPETITION, DIFFERENTIATION, OR INNOVATION?

It is anticipated that the proposed .netbank gTLD will make positive contributions to the wider internet community by providing:


DIFFERENTIATION (INCREASED TRUST):

The .netbank gTLD will simplify how internet users interact with CBA by providing a distinctive domain space. Internet users will be able to directly navigate to the .netbank gTLD site, saving time and resources searching for an official site. The current domain name system has shown that it is vulnerable to malicious abuses due to registration of domain names which seek to exploit consumer confusion. This is particularly important to a bank such as CBA where consumer trust in its online brand depends on CBA’s ability to provide safe, secure and authentic internet banking websites and applications. CBA can address these vulnerabilities by maintaining complete control over the domain names registered under the .netbank domain space. The new .netbank gTLD will allow CBA to create domain names that are authentic, unique and clearly identifiable to customers as a CBA website or application. Further, providing shorter and more memorable domain names for customers will reduce the likelihood of customers being deceived by phishing websites. Together with consumer trust and confidence, internet users will be able to rely on the authoritativeness of the domain names under .netbank domain space, which will differentiate interaction between internet users and CBA.


COMPETITION:

The differentiation of .netbank gTLD as a trusted site for CBA will drive existing and new TLD registry operators to make improvements in mechanisms to improve consumer trust of their TLDs. Internet users will be encouraged to interact with domain names under .netbank domain space. As a result, .netbank will have a flow on effect to enable increased competition. Therefore, the benefits of the proposed .netbank will be distributed not only to its direct customers, but to the internet community at large forcing improved services and competitive pricing in the market place.


INNOVATION:

With the expansion of the internet community to all corners of the world, the existing TLD structure presents limitations, not only in the availability of domain names for registrants, but also to businesses and organisations establishing a coherent global online brand presence to meet their evolving business needs. It is often difficult to register a domain name in existing domain space due to unavailability of the desired name, particularly in relation to suitable domains for specific marketing campaigns. Even when the desired domain name is available, it may come with a high price tag associated with a purchase of such desired name from a third party. Online brand coherence is particularly important for banks and financial services providers such as CBA where consumer trust and protection is critical in the era of new technologies. The .netbank gTLD will provide more convenient and innovative transaction opportunities for customers accessing CBA online banking on mobile devices. CBA has the ability to create second or third level domain names including the use of online and mobile banking and innovative new products and services on demand which are relevant to its customer base. CBA will be able to combine its use of the domain space with innovative user focused marketing and services to address the currently unmet needs in the existing domain name system providing greater consumer choice.


18(B)III. WHAT GOALS DOES YOUR PROPOSED gTLD HAVE IN TERMS OF USER EXPERIENCE?

The proposed .netbank will provide a positive user experience, which meets the changing and growing needs of the global internet community. CBA will maintain control in the registration and use of domain names and will ensure that the new gTLD will only be used for purposes authorised by CBA. Therefore, .netbank gTLD will:

- strengthen brand reputation and user confidence by enhancing security and eliminating user confusion;

- provide greater online trust and confidence for customers when accessing authentic and secure internet banking websites and applications under the .netbank domain space;

- provide an easy and intuitive reference and access point for internet users;

- provide shorter, memorable and relevant domain names for customers, reducing the likelihood of customers being deceived by phishing websites;

- direct internet users to relevant information in a timely manner by creating domain names on demand;

- enhance security and minimise security risks by implementing necessary technical and policy measures; and

- prevent potential abuses in the registration process reducing overall costs to businesses and users.


The .netbank gTLD should address the concerns that the current domain name system is open to potential malicious abuse and user confusion in the registration processes. Although the current system allows an eligible party to lodge a claim through existing Uniform Domain Name Dispute Resolution Policy (UDRP) or other dispute resolution processes, the .netbank gTLD will reduce potential abuses in the registration processes and overall costs to internet users. User confidence in the domain name system will be strengthened, which will ultimately contribute towards promoting ICANN’s core values in benefiting the public interest.


18(B)IV. PROVIDE A COMPLETE DESCRIPTION OF THE APPLICANTʹS INTENDED REGISTRATION POLICIES IN SUPPORT OF THE GOALS LISTED ABOVE

The proposed registration policy is attached in response to Question 28.

Only affiliate entities of CBA will be eligible to register domain names in .netbank at this stage. The domain name registration processes will address the requirements mandated by ICANN, including rights abuse prevention measures.


18(B)V. WILL YOUR PROPOSED gTLD IMPOSE ANY MEASURES FOR PROTECTING THE PRIVACY OR CONFIDENTIAL INFORMATION OF REGISTRANTS OR USERS? IF SO, PLEASE DESCRIBE ANY SUCH MEASURES.

CBA is committed to protection of privacy and confidential information in accordance with its objective of increasing consumer trust and providing a safe and legitimate internet space for internet users. Privacy and confidential information will be protected in accordance with all applicable laws and regulations relating to internet security, privacy and user’s confidential information, including the Privacy Act 1998 (Australia), which has specific laws governing credit providers such as CBA, and the National Privacy Principles (Australia).

CBA also has implemented its own privacy policy to demonstrate its commitment to the protection of user privacy and confidential information. CBA values customers’ trust highly and aims to manage and build customers’ wealth over a long period of time. The protection of customers’ personal information is a vital part of this relationship. CBA’s privacy policy provides that CBA will protect customers personal information in accordance with the Privacy Act and the National Privacy Principles and will only use customers’ personal information to:

- administer relationships with customers;

- provide customers with the products and services they request;

- provide information on products and services offered by CBA, its affiliates or external providers for which CBA acts as an agent;

- assist customers with queries;

- monitor and evaluate products and services;

- gather and aggregate information for statistical, prudential, actuarial and research purposes;

- comply with its legal obligations;

- take measures to detect and prevent fraud and credit loss; and

- predict the borrowing behaviour of its customers generally.


As the .netbank gTLD will only be available to affiliate entities of CBA, initially, the amount of personal data that will be collected for the purposes of operating the gTLD and made publicly available in the WHOIS database will be very limited. CBA will provide a publicly available and searchable WHOIS look up facility, where information about the domain name status, registrant information including administrative and technical contact details can be found in accordance with Specification 4 of the Registry Agreement. In order to prevent misuse of the WHOIS look up facility, CBA will utilise measures including a requirement where any person submitting a WHOIS database query is required to read and agree to the terms and conditions in accordance with the registration policy. This will include the terms of use that the WHOIS database is provided for information purposes only and that the user agrees not to use the information for any other purposes such as allowing or enabling the transmission of unsolicited commercial advertising or other communication.

CBA will deploy Domain Name System Security Extensions (DNSSEC) which is intended to benefit both CBA and its users interacting with CBA online. DNSSEC provides additional security by validating information in the transmission, therefore it is intended to benefit those who publish information in the domain name system (DNS) and the users who retrieve information from the new .netbank gTLD. CBA already implements measures to protect privacy or confidential information of its users against misuse, loss, alteration and unauthorised access. Such measures include the use of:

- CBA’s internal Computer Emergency Response Team (CERT), which co-ordinates early detection and handling of IT security incidents;

- eDiscovery and Digitial Forensic services;

- Security Information and Event Management (SIEM);

- Data Leakage Protection (DLP);

- User Access Verification (UAV);

- Solution Delivery Lifecycle (SDLC);

- Supplier Governance Framework including ISO27001⁄2-based ISMS reviews and site reviews; and

- Security Architecture and Design.


CBA will continue to apply all security measures currently implemented and will comply with all other policies and practices required by ICANN in the Registry Agreement and any relevant Consensus Policy for protecting the privacy and confidential information of registrants and users in the new .netbank domain space.


18(B)VI. DESCRIBE WHETHER AND IN WHAT WAYS OUTREACH AND COMMUNICATIONS WILL HELP TO ACHIEVE YOUR PROJECTED BENEFITS.

The proposed new gTLD will be publicised by a media plan at the time of implementation to promote recognition of the new gTLD within the internet community to be a trusted site and as a sign of authenticity.

During the initial stage of the operation of the proposed new gTLD, it is anticipated that internet users will be re-directed to current websites. However, over time, it is foreseen that communication to the internet community of the existence of the proposed new gTLD and encouragement to utilise the trusted site will contribute towards minimising malicious abuses and protecting internet users.