Summary

  • APNIC’s Executive Council unanimously adopted the 2027 Activity Plan and Budget. Its Registry Services table targets completion of a new Account Holder KYC/KYB system in the third quarter of 2027.
  • APNIC already checks identity and business standing in resource applications. The adopted plan supplies a completion quarter, while the reviewed plan gives no decision or correction procedure for a mismatch in the new system.

The easiest part of an identity system to announce is its deadline. The hardest part is the moment a real company meets an imperfect record. APNIC has now put the first on paper. The second deserves the same precision.

In the Executive Council minutes for 6 and 7 September 2026, the council unanimously approved the attached 2027 Activity Plan and Budget. Registry work for that year includes improvements to KYC and account-holder onboarding. In the plan’s R1 Registry Services table, the outcome is specific: implementation of a new Account Holder KYC/KYB system is to be complete in Q3 2027. That is a target, backed by an adopted plan, rather than a claim that the system is live.

Verification already has a job. APNIC’s privacy statement says it uses personal information to confirm identity and assess account, membership and number-resource requests. It may use corporate registries and due-diligence or identity-verification providers to check application information. Its 2021 application guide described photo ID for account contacts, business registration, evidence of employment or authority, and a recent bank statement or utility bill for a new member. These are not decorative uploads. They are the evidence that a person may speak for an organization asking for numbers.

The collision is ordinary enough to be dangerous. A company changes its legal name. A director leaves. A network team uses an agent. A business registry and an APNIC account record update on different days. No one has to be a fraudster for a machine or a reviewer to see two incompatible stories. The operator needs to know which record controls the decision, who can submit a correction, who examines it, and what happens to a time-sensitive request while the paperwork catches up.

APNIC already states a route for requesting access to or correction of personal information, with reasons and complaint mechanisms if a request is denied. That is valuable, but it addresses personal information. A member also needs the operating rule for an account or resource-service decision made under the new KYC/KYB system. The adopted plan gives no public criteria for that decision, its review, or service continuity during a mismatch; a published system specification would settle the point.

The stakes sit in the mundane gap between identity and authority. A passport can establish who someone is. A company register can establish that a company exists. Neither document alone proves that this person may change the company’s registry account today. Nor does a stale title prove that the underlying network has stopped serving customers. The registry needs to protect the ledger from impersonation while allowing a legitimate holder to repair an imperfect evidence chain.

There is a clean way to report progress. APNIC’s plan already promises quarterly reports on registry-data updates and a 90% satisfaction target for delegations and transfers. The new system could be accompanied by public, aggregated counts of mismatch cases, time to resolution and decisions overturned after correction, without publishing private IDs. Otherwise the success line becomes “system implemented” while the people using it have to discover the rules one rejected form at a time.

An identity check is a useful lock. A lock without a visible way to fix a wrong key turns clerical error into a decision about who may operate. APNIC has dated the installation. Its next public document should date and define the repair path.