مەرجەکانی خزمەتگوزاری

1.1 Introduction

This regulation has been prepared to provide clear guidelines for government, educational, military and security institutions in the Republic of Iraq on how to register and use the Iraqi domain name within the specified secondary extensions (mil.iq and gov.iq).

This regulation applies to all state, educational, military and security institutions in the Republic of Iraq that wish to obtain an Iraqi domain name or already own a domain within the specified secondary extensions (.gov.iq, .edu.iq, .mil.iq).

The target institutions are all ministries, authorities, government institutions, universities, schools, and security and military institutions in Iraq.

1.2 Definitions and Interpretations

1.3 Domain Types

1.4 Eligibility and Application

The institution must be part of the Iraqi government, a recognized educational institution, or a security/military entity with physical presence in Iraq.

Application Procedures:

• Submit an official application with institution and desired domain information.
• Designate authorized contacts to control the domain.
• Provide authorized contact details with supporting documents.
• Update records promptly when authorized contacts change.

Verification and Review:

Each application is reviewed by the Iraqi Domain Department to verify information and eligibility.

1.5 Domain Management and Technical Support

• Government domain management is the exclusive responsibility of the Commission.
• Ongoing support includes verifying domain validity, renewals and keeping information current.
• Compliance is reviewed periodically to ensure correct domain usage.

1.6 Support and Assistance

• Technical support is available via email, phone or online.
• Training and awareness through workshops and courses.

1.7 Usage Policy

• Institutions must comply with usage rules including lawful use and updated contact information.
• Violations may result in investigation, guidance or domain cancellation.
• Domains must reflect official purposes. Inappropriate content is prohibited.
• Domain security must be maintained with strong passwords and regular updates.
• Domains must comply with all applicable laws.
• Illegal or misleading domain use is prohibited.
• Accurate domain records must be kept for at least five years.
• Problems or violations must be reported immediately to the Commission.

1.8 Obligations and Responsibilities

• Institutions must use domains professionally and ethically.
• The Commission ensures compliance, provides support and conducts audits.
• Report social media accounts verified with official domain email.
• Non-compliance may result in domain withdrawal or fines.

1.9 Digital Security and Privacy

• Digital security requires encryption, MFA and regular updates.
• Institutions must protect domain-related information privacy.

1.10 Policy Review

The Commission may amend procedures with reasonable notice.

1.11 Government Domain Pricing Appendix

2.1 Choose Your Domain Name

The domain name must be available and unregistered. Use the WHOIS service to check availability.

2.2 Choose Your Registrar

Choose an accredited registrar from the Commission's list.

2.3 Review Registration Policy

Review the registration policy before registering.

2.4 Provide Required Data

Provide contact information, DNS servers and active email to your registrar.

• Fill in the registration form correctly.
• Agree to the registrar-registrant agreement.

2.5 Register the Domain

Registration is automated, completed within 24-72 working hours.

2.6 DNS Activation and Publishing

The domain activates when DNS servers are updated and propagated worldwide.

2.7 Domain Update, Deletion and Freeze

• Contact your registrar to update domain data (free of charge).
• Contact your registrar to delete your domain before expiry.
• Expired domains enter a 50-day freeze period before deletion.

2.8 گواستنەوەی دۆمەین

• The domain belongs to its owner and can be transferred freely.
• Transfer fees apply as a new registration with one-year renewal.
• Transfer requests are submitted through the automated system and reviewed within 3 days.

2.9 Registrants Outside Iraq

Registrants outside Iraq have 6 months to authenticate documents through embassies.

Regular Domain Pricing (Annual — IQD)

Registrar Responsibilities

• Registrars must comply with data protection laws.
• Registrars must inform registrants about data collection purposes.
• Appropriate security measures must be implemented.
• Data retained only as long as necessary.
• Registrars outside Iraq must comply with GDPR.

WHOIS Information and Privacy

• WHOIS data must comply with data protection laws.
• Minimum necessary data in public WHOIS.
• Natural persons' data not published without consent.

Data Subject Rights

Data Breach Notification

Affected parties must be promptly notified of data breaches.

یاسایی حکومیی

Governed by Legislative Order 65 of 2004, Republic of Iraq.

Types of Complaints

Domain Registration Complaints

• Intellectual property violation.
• Similar name/trademark registration.
• Fraudulent domain registration.
• Harmful traffic redirection.

Complaint Procedures

Access

• Commission website: https://whois.reg.iq/
• Port 43 to WHOIS server: whois.reg.iq

پاراستنی تایبەتمەندی

Privacy available for 5,000 IQD annually.

Responsible Use

Information must be used responsibly. Prohibited uses include:

• Advertising and marketing.
• Unsolicited contact.
• Commercial purposes.
• Illegal or dishonest purposes.