Private information and media policy

Overview
 

December 2022

You may not publish or post other people's private information without their express authorization and permission. We also prohibit threatening to expose private information or incentivizing others to do so.

In addition, you may not share private media, such as images or videos of private individuals, without their consent. However, we recognise that there are instances where users may share images or videos of private individuals, who are not public figures, as part of a newsworthy event or to further public discourse on issues or events of public interest. In such cases, we may allow the media to remain on the platform. 

Sharing someone’s private information:

Sharing someone’s private information online without their permission, sometimes called doxxing, is a breach of their privacy and of the X Rules. Sharing private information can pose serious safety and security risks for those affected and can lead to physical, emotional, and financial hardship.

When reviewing reports under this policy, we consider a number of things, including:

What type of information is being shared?

We take this into consideration because certain types of private or live information carry higher risks than others, if they’re shared without permission. Our primary aim is to protect individuals from potential physical harm as a result of their information being shared, so we consider information such as physical location and phone numbers to be a higher risk than other types of information. We define “live” as real-time and/or same-day information where there is potential that the individual could still be at the named location.

Who is sharing the information?

We also consider who is sharing the reported information and whether or not they have the consent of the person it belongs to. We do this because we know that there are times when people may want some forms of their personal information to be shared publicly. For example, sharing a personal phone number or email for professional networking or to coordinate social events or publicly sharing someone’s home addresses or live locations to seek help after a natural disaster. 
 

Is the information available elsewhere online?

If the reported information was shared somewhere else before it was shared on X, e.g., someone sharing their personal phone number on their own publicly accessible website, we may not treat this information as private, as the owner has made it publicly available. Note: we may take action against home addresses being shared, even if they are publicly available, due to the potential for physical harm. 
 

Why is the information being shared?

We also factor in the intent of the person sharing the information. For example, if we believe that someone is sharing information with an abusive intent, or to harass or encourage others to harass another person, we will take action. On the other hand, if someone is sharing information in an effort to help someone involved in a crisis situation like in the aftermath of a violent event, we may not take action. Note: regardless of intent, if the information is not shared during a crisis situation to assist with humanitarian efforts or in relation to public engagement events, we will remove any posts or accounts that share someone’s live location.


Sharing private media:

Posting images is an important part of our users' experience on X. Where individuals have a reasonable expectation of privacy in an individual piece of media, we believe they should be able to determine whether or not it is shared. Sharing such media could potentially violate users' privacy and may lead to emotional or physical harm. When we are notified by individuals depicted, or their authorized representative, that they did not consent to having media shared, we will remove the media. This policy is not applicable to public figures. 

 

What is in violation of this policy?
 

Under this policy, you can’t share the following types of private information, without the permission of the person who it belongs to:

  • home address or physical location information, including street addresses, GPS coordinates or other identifying information related to locations that are considered private;
  • live location information, including information shared on X directly or links to 3rd-party URL(s) of travel routes, actual physical location, or other identifying information that would reveal a person’s location, regardless if this information is publicly available;
  • identity documents, including government-issued IDs and social security or other national identity numbers – note: we may make limited exceptions in regions where this information is not considered to be private;
  • contact information, including non-public personal phone numbers or email addresses; 
  • financial account information, including bank account and credit card details;
  • other private information, including biometric data or medical records;
  • media of private individuals without the permission of the person(s) depicted; and
  • media depicting prisoners of war posted by government or state-affiliated media accounts on or after April 5, 2022. 

The following behaviors are also not permitted: 

  • threatening to publicly expose someone’s private information;
  • sharing information that would enable individuals to hack or gain access to someone’s private information without their consent,e.g., sharing sign-in credentials for online banking services;
  • asking for or offering a bounty or financial reward in exchange for posting someone’s private information;
  • asking for a bounty or financial reward in exchange for not posting someone’s private information, sometimes referred to as blackmail.
     

What is not a violation of this policy?
 

The following are not in violation of this policy:

  • people sharing their own private information;
  • sharing publicly available location information after a reasonable time has elapsed, so that the individual is no longer at risk for physical harm
  • sharing information that is publicly available elsewhere, in a non-abusive manner (with the exception of live location information); and
  • sharing information that we don’t consider to be private, including:
    • name;
    • birthdate or age;
    • place of education or employment;
    • location information related to commercial property or places of business, where this information is publicly available;
    • descriptions of physical appearance;
    • gossip, rumours, accusations, and allegations; and
    • screenshots of text messages or messages from other platforms (unless they contain private information e.g., phone number).
       

For media, the following are not in violation of our policy:

  • the media is publicly available or is being covered by mainstream media;
  • the media and the accompanying post text add value to the public discourse or are shared in public interest;
  • contains eyewitness accounts or on the ground reports from developing events; 
  • the subject of the media is a public figure. 


Who can report violations of this policy?
 

Sharing private information:

Anyone can report private information that has been shared in a clearly abusive way (whether they have a X account or not). In cases where the information hasn’t been shared with a clearly abusive intent, we need to hear directly from the owner of this information (or an authorized representative, such as a lawyer) before taking enforcement action. 


Sharing private media: 

When reporting private media, we need a first person report in order to make the determination that the image or video has been shared without their permission. We accept reports from: 

  1. Individuals depicted in the reported media or
  2. Their authorized representative such as:
        a.  parents/legal guardians,
        b.  lawyers, or
        c.  legal representative.

 

How can I report violations of this policy?
 

In-app

You can report this content for review in-app as follows:

  1. Select Report post from the  icon.
  2. Choose who you're reporting the post for.
  3. Select Harassed or intimidated with violence
  4. Select Posting my private info
  5. Identify what private info you're reporting
  6. You can choose to add up to five posts or add any additional context to support your report.
  7. Tap Submit.
     

Desktop

You can report this content for review via desktop as follows:

  1. Select Report post from the  icon.
  2. Choose who you're reporting the post for.
  3. Select Harassed or intimidated with violence
  4. Select Posting my private info
  5. Identify what private info you're reporting
  6. You can choose to add up to five posts or add any additional context to support your report.
  7. Click Submit.

You can also report this content for review via our private information report form, by selecting the type of private information that you want to report.

What happens if you violate this policy?
 


When determining the penalty for violating this policy, we consider a number of factors including, but not limited to, the severity of the violation and an individual’s previous record of rule violations. 

Sharing private or live location information:

  • The first time you violate this policy by sharing private information (such as home address, identity documents etc.), we will require you to remove this content. We will also temporarily lock you out of your account before you can post again. If you violate this policy by posting private information again after your first warning, your account will be permanently suspended. 
  • If your account is dedicated to sharing someone’s live location, your account will be automatically suspended.

Sharing private media: 

  • If you violate this policy by sharing private media of an individual without their consent, we will require you to remove the content and temporarily lock your account while you remove the media. 

If you believe that your account was suspended in error, you can submit an appeal.

 

 

Additional resources
 

Learn more about our range of enforcement options and our approach to policy development and enforcement.

The distribution of other types of content without the consent of the owner may be actionable under our distribution of hacked material policy.

Share this article