Who has the authority to update a contact's user record?

Only the contact has the authority to update his own record. A contact's user record (postal address, telephone numbers, and e-mail address) can be updated using the contact template. Unless PGP or encrypted password protection has previously been selected, the update request must be submitted from the contact's current e-mail address (that is, the e-mail address currently listed on the contact's Whois record). If a contact is changing e-mail addresses, the request should be submitted before the current e-mail account is disabled so the request can be verified as coming from the correct source. The information associated with an administrative, technical, or billing contact must be updated with the contact template. The domain template cannot be used to update a contact's information.