Skip to content

collection of PII for account reinstatement appears not covered in Privacy Policy #322

@SteveTownsend

Description

@SteveTownsend

Wanted to clarify what seemed to me like a legal grey area.
I sent emails to the moderation bucket but have not heard back.

#1

I run the community labeler @pef-moderation.org
Personal account @stevetownsend0.bsky.social
Non-public content reviewer account @.bsky.social

An acquaintance tells me that their account was suspended, and they are being asked for ID as part of your appeal flow. Why is the bar higher for reinstatement, possibly after moderation error, than for a new account?

If you need ID to prove authenticity, make that a condition of new accounts, to avoid this waste of everybody's time. Otherwise, review the moderation decision and give a Y/N answer.

My $.02

Regards
Steve Townsend

#2

Further to this, collection of government ID appears to be outside the scope of current privacy policy per https://bsky.social/about/support/privacy-policy#personal-information-collect

Doesn't this account reinstatement process collecting government ID put the platform in a legal grey area, at best?

Additional info:
Handling of government ID and other PII is very strictly regulated, varying by jurisdiction. The fact that Privacy Policy does not seem to allow for collection of official ID may present exposure to e.g. class action lawsuit in the US, GDPR violations in the EU, ...

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions