- cross-posted to:
- fediverse@lemmy.ml
- fediverse@kbin.social
- cross-posted to:
- fediverse@lemmy.ml
- fediverse@kbin.social
Highlighting the recent report of users and admins being unable to delete images, and how Trust & Safety tooling is currently lacking.
You must log in or register to comment.
Usernames are not and never have been considered pii
The GDPR states it clearly that the company/entity has to be collecting pii or selling something to the person. Lemmy does neither of these.
How is IBM authoritative on this subject? And even so, this article doesn’t say that usernames are not PII, it even indirectly says it is indirect PII.
Here’s another random company’s page saying usernames are PII: https://www.keepersecurity.com/blog/2023/06/14/what-is-personally-identifiable-information-pii/
The GDPR says it clearly and explicitly that:
- online identifiers such as usernames are PII
- selling data or money transactions of any kind is not a requirement for the GDPR rules to apply
Usernames that are used in an internal network are, because they’re linked to pii, a public username is not pii.
And where did you read that? If anything, public usernames are easier to correlate to form identities.
