Lemmy's Image Problem (Updated 02-06-2024)

Sean Tilley@lemmy.world to Fediverse@lemmy.world – 303 points –
Lemmy's Image Problem
wedistribute.org

Highlighting the recent report of users and admins being unable to delete images, and how Trust & Safety tooling is currently lacking.

176

You are viewing a single comment

https://www.ibm.com/topics/pii#:~:text=Personally%20identifiable%20information%20(PII)%20is,email%20address%20or%20phone%20number.

Usernames are not and never have been considered pii

The GDPR states it clearly that the company/entity has to be collecting pii or selling something to the person. Lemmy does neither of these.

How is IBM authoritative on this subject? And even so, this article doesn't say that usernames are not PII, it even indirectly says it is indirect PII.

Here's another random company's page saying usernames are PII: https://www.keepersecurity.com/blog/2023/06/14/what-is-personally-identifiable-information-pii/

The GDPR says it clearly and explicitly that:

  • online identifiers such as usernames are PII
  • selling data or money transactions of any kind is not a requirement for the GDPR rules to apply

Usernames that are used in an internal network are, because they're linked to pii, a public username is not pii.

And where did you read that? If anything, public usernames are easier to correlate to form identities.