Policies/en/Access-to-Nonpublic-Personal-Data: Difference between revisions
Apply Theo decision 2026-07-02: official contact address info@wikideal.net |
Add "In simple words" abstract and replace "the Sites" with "the WikiDeal Markets and Portals (collectively, the Platform)" per Théo Bondolfi decisions (2026-07-02) |
||
| Line 1: | Line 1: | ||
''Source: adapted from the Wikimedia Foundation Governance Wiki, https://foundation.wikimedia.org/wiki/Policy:Wikimedia_Foundation_Access_to_Nonpublic_Personal_Data_Policy (CC BY-SA). Status: proposal, to be adopted.'' | ''Source: adapted from the Wikimedia Foundation Governance Wiki, https://foundation.wikimedia.org/wiki/Policy:Wikimedia_Foundation_Access_to_Nonpublic_Personal_Data_Policy (CC BY-SA). Status: proposal, to be adopted.'' | ||
'''In simple words:''' a few trusted community members can see private information about other users, for example to fight fake accounts or protect the platform. This page proposes the conditions to obtain that access (minimum age, a valid email address, a signed confidentiality agreement) and the rare situations where this private information may be shared with someone else. | |||
<div style="margin:2px auto;border:3px solid #8EB4E6;background:#F9FCFF;padding:.5em;"> | <div style="margin:2px auto;border:3px solid #8EB4E6;background:#F9FCFF;padding:.5em;"> | ||
| Line 6: | Line 8: | ||
'''Because we believe that the privacy of the WikiDeal community is essential, community members with access to nonpublic personal data may only release information under certain circumstances, such as:''' | '''Because we believe that the privacy of the WikiDeal community is essential, community members with access to nonpublic personal data may only release information under certain circumstances, such as:''' | ||
* When the community members need to stop damage to the | * When the community members need to stop damage to the Platform (such as [[#serviceproviders|assisting in the targeting of IP blocks]]); | ||
* When there is an immediate and credible [[#emergency|threat of serious bodily harm]]; | * When there is an immediate and credible [[#emergency|threat of serious bodily harm]]; | ||
* When the community members have the [[#withpermission|express permission]] of the user whose nonpublic personal data is to be disclosed; or | * When the community members have the [[#withpermission|express permission]] of the user whose nonpublic personal data is to be disclosed; or | ||
| Line 16: | Line 18: | ||
* Sign a [[#confidentiality|confidentiality agreement]]. | * Sign a [[#confidentiality|confidentiality agreement]]. | ||
'''Because we value the community members who take on this critical role in the safeguarding of the | '''Because we value the community members who take on this critical role in the safeguarding of the Platform and its users and want to protect their privacy, we promise to:''' | ||
* Keep [[#idsecurestorage|confidential and secure]] their contact information and confidentiality agreement | * Keep [[#idsecurestorage|confidential and secure]] their contact information and confidentiality agreement | ||
</div> | </div> | ||
| Line 27: | Line 29: | ||
== Purpose == | == Purpose == | ||
WikiDeal | The WikiDeal Markets and Portals (collectively, "the Platform") are the product of a global community of volunteer contributors and editors. This dedicated group of individuals not only writes and curates content on the Platform, they also help ensure the safety of the Platform and its users as well as compliance with applicable policies. To manage this immense task effectively, certain community members are entrusted with access to limited amounts of nonpublic personal information regarding other users ("Nonpublic Personal Data"). For example, a community member who has "checkuser" rights could use those rights to investigate whether a single user is using multiple accounts in a manner inconsistent with WikiDeal policies. The purpose of this "Access to Nonpublic Personal Data Information" policy (the "Policy") is to: | ||
* explain the minimum requirements that must be met by any community member who has access to Nonpublic Personal Data; | * explain the minimum requirements that must be met by any community member who has access to Nonpublic Personal Data; | ||
| Line 92: | Line 94: | ||
== Use and disclosure of nonpublic information == | == Use and disclosure of nonpublic information == | ||
Designated Community Members provide valuable services to the | Designated Community Members provide valuable services to the Platform and its users – they fight vandalism, respond to helpdesk emails, ensure that improperly disclosed private data is removed from public view, confirm license permissions, investigate sockpuppets, improve and debug software, and much more. But Designated Community Members' use of access rights is limited to certain circumstances and contexts. This section elucidates the situations in which access rights may be used and Nonpublic Personal Data may be disclosed to third parties. | ||
<span id="use"></span> | <span id="use"></span> | ||
'''(a) Use of access rights and Nonpublic Personal Data.''' | '''(a) Use of access rights and Nonpublic Personal Data.''' | ||
All Designated Community Members may only use their access rights and the subsequent information they access in accordance with the policies that govern the tools they use to gain such access. For example, community members with access to the CheckUser tool must comply with the global CheckUser Policy, and, unless they are performing a cross-wiki check, they must also comply with the more restrictive local policies applicable to the relevant | All Designated Community Members may only use their access rights and the subsequent information they access in accordance with the policies that govern the tools they use to gain such access. For example, community members with access to the CheckUser tool must comply with the global CheckUser Policy, and, unless they are performing a cross-wiki check, they must also comply with the more restrictive local policies applicable to the relevant Market or Portal. Similarly, community members with access to the Suppression tool may only use the tool in accordance with the Suppression Policy. When a Designated Community Member's access to a certain tool is revoked, for any reason, that member must destroy all Nonpublic Personal Data that they have as a result of that tool. | ||
<span id="disclosure"></span> | <span id="disclosure"></span> | ||
'''(b) Disclosure of nonpublic information.''' | '''(b) Disclosure of nonpublic information.''' | ||
In the course of keeping the | In the course of keeping the Platform and its users safe, Designated Community Members must sometimes disclose Nonpublic Personal Data to third parties. Disclosures of Nonpublic Personal Data are limited to: | ||
<span id="othermembers"></span> | <span id="othermembers"></span> | ||