I noticed the UDRP rules had changed last year, the main change is of course related to WHOIS respecting privacy now. Looking that up:
"The registrar must provide the full Registration Data to the UDRP provider within two business days after the registrar is notified that a UDRP complaint exists. The registrar must also lock the domain."