Re: 'no solid plan for what to do'
I don't think this is a US issue at all. Even Facebook claim they're complying with the GDPR.
This is an ICANN incompetence issue.
Their controlling committee are greedy and incompetent. However they were allowed to keep the IANA contract without ever quite introducing any of the governance reforms they vaguely promised to do.
So they're in this great position where all oversight leads to various sub-committees of the board, who are then forced to produce independent reports slating their incompetence (or malice), but then lead to appeals to other sub-committees of the board who ignore them.
What they have is circular oversight. And big bonuses. And they love it!
This has clearly gone to their heads and left them fundamentally ill-equipped to deal with the real world. Such as trying to ignore legislation they've known about for ages.
Of course they may still get away with it. Being in California, if they've got no European offices then what can the EU do to them? They can fine the various registries that do operate here, so maybe ICANN still think they can get away with it?
Biting the hand that feeds IT
