Highlighting the recent report of users and admins being unable to delete images, and how Trust & Safety tooling is currently lacking.
12·10 months ago- By defining all information that is processed and why.
- By not processing and storing any personal identifiable information (an IP address is PII for example) without a clearly defined need.
- When stored ONLY using data for the defined purposes. This also means shielding data that should be shielded.
- By implementing the mechanics for someone to be forgotten (delete my account, should delete all info, especially PII).
- Making sure the mechanics to federate these changes/deletions exist.