By the late 1990s, a company could find its name registered in .com by someone hoping to sell it back. Registration cost little compared with a potential resale demand. In some cases, the value being targeted was precisely the reputation another business had built.
On 29 November 1999, Bill Clinton signed the federal legislation containing the Anticybersquatting Consumer Protection Act, or . Congress passed the law; the president signed it. The surrounding legislation concerns the 2000 financial year, but enactment took place in 1999.
At almost the same time, a separate mechanism began operating: the . Their proximity can create the impression that a US statute became worldwide law. The two routes actually have different foundations.
Trademark owners already had legal remedies
Cybersquatting did not become a legal issue overnight. Existing trademark law already offered avenues. The US Senate’s 1999 report discusses Panavision v. Dennis Toeppen, decided on appeal in 1998. Registrations reflecting trademarks and offers to sell them had already resulted in liability under trademark dilution law.
The change was a specific cause of action. The ACPA added a route targeting certain registrations, uses and dealings in domain names undertaken with a bad-faith intention to profit from a trademark.
Bad faith, not a general ban on selling domains
A court considers more than similarity to a mark. Relevant factors can include the registrant’s rights, previous use, legitimate noncommercial use, attempted diversion of customers and the circumstances of a sale offer. The statute also addresses reasonable belief that a use was lawful.
That distinction matters for the secondary market. Selling a domain is not inherently cybersquatting. The Senate report expressly explains that a sale offer alone is insufficient to establish bad faith. A legitimate project that never materialises is not automatically equivalent to registering a name to exploit someone else’s mark.
Where the requirements are met, consequences can extend beyond losing the domain. In applicable cases, a claimant may elect statutory damages of $1,000 to $100,000 per name instead of actual damages and profits. The court decides the award; it is not an automatic fine triggered by a complaint.
UDRP crosses borders through registration contracts
adopted the UDRP policy in August 1999 and approved its implementation documents in October. It operates through the registration terms of covered domains, including .com, .net and .org. A registrant agrees to an administrative procedure for qualifying complaints.
received its first complaint on 2 December 1999, concerning worldwrestlingfederation.com. Transfer was ordered in January 2000. By May 2002, WIPO announced its 5,000th UDRP case. That records rapid use of a remedy, rather than proving that abuse itself had declined.
UDRP remedies are transfer or cancellation, not damages. Court proceedings remain possible. A UDRP decision is therefore not a judgment under the ACPA.
Why can a dispute involve several countries?
A .com registrant may be in one country, a trademark owner in another and a UDRP provider elsewhere. The common mechanism comes from registration terms, rather than a worldwide law passed in Washington.
The ACPA has its own jurisdictional provisions. In defined circumstances, it allows an action against the domain itself, including when the registrant cannot be pursued as specified by the law. The registry’s or registrar’s location can then matter. This does not place every domain dispute within US court jurisdiction.
There is a meaningful before and after 1999 in the available remedies and legal risk associated with exploiting a mark. The sources here do not, however, quantify the law’s effect on domain prices or establish it as the sole cause of later changes in cybersquatting.
For a Luxembourg business, the relevant domain and rights still need examination. UDRP does not automatically apply to .lu. Before threatening a registrant or paying for a name, establish the facts, the extension’s rules and the appropriate remedies. The history helps explain why “first come, first served” cannot answer every legal question.
Terms in this article
Dotted-underlined terms have a definition on hover, keyboard focus or tap. All definitions are also listed here.
- ACPA — Anticybersquatting Consumer Protection Act
- A 1999 US federal law addressing certain bad-faith domain registrations or uses intended to profit from a trademark. It is not a worldwide law.
- ICANN — Internet Corporation for Assigned Names and Numbers
- The organisation coordinating Internet unique identifiers and aspects of the domain name system. It does not own all domains or operate every country-code extension.
- UDRP — Uniform Domain Name Dispute Resolution Policy
- A process for certain domain disputes, including abusive trademark registrations and use. It can lead to transfer or cancellation, rather than a damages award.
- WIPO — World Intellectual Property Organization
- An international organisation that also provides domain name dispute resolution services.
Put it into practice
Explore the related Wize guideSources & Credits
- US Congress — Public Law 106-113, title III, 29 November 1999
- White House archives — bill signing, 29 November 1999
- US Senate — Report 106-140, 5 August 1999
- US Code — 15 USC 1125(d), Cyberpiracy prevention
- US Code — 15 USC 1117(d), Statutory damages
- ICANN — UDRP, adoption dates and historical text
- WIPO — first UDRP case, 14 January 2000
- WIPO — dispute resolution history
- WIPO — 5,000th UDRP case, 20 May 2002
Photo credit
Scales of justice, a gavel and legal books: illustrative photograph. — Sora Shimazaki. Pexels. Cropped and resized for this page.
A correction to suggest? Write to Wize
