Re: [Wikimediauk-l] Wikimedia Foundation survey for contributors/members

The Affiliate Membership survey has been subject to objection by members of the WMLGBT+ user group in a meeting this week with WMF T&S. The information about gender is potentially highly identifying. It is unclear in the WMF privacy statement in which circumstances the WMF would release information "by law", as in US law this may include general agency investigations, which could target "foreign" groups, "political" groups, or considering recent events, groups that simply have a private discussion group on Telegram. The survey is run by a 3rd party, so their terms apply. This means that the data controller is in the USA and they explicitly reserve a right to retain contact information, payment information (notably this survey includes questions about your bank accounts), it may mix this information with information from 3rd parties, including your IP address and any tracking data from other 3rd parties for that address. The 3rd party stores your data indefinitely, under a range of conditions, none of which includes a requested deletion or correction. Explicitly state agencies are given access. As the UK is no longer in the EU, the "Privacy Shield" requirements may not legally apply to submissions from the UK, it's certainly legally unsure. This may make it impossible to pursue complaints, or claims for damages, for example, if data is lost or exposed by accident. I stopped on page 4 and abandoned the survey. I strongly recommend that contributors opt for "rather not say" on any personal information, as if the form were being posted publicly on Facebook, the terms are that open to misuse or accidental mishandling. References: https://www.qualtrics.com/privacy-statement/ https://foundation.wikimedia.org/wiki/Affiliate_Membership_Data_Survey_Priv… Thanks, Fae -- faewik(a)gmail.com https://commons.wikimedia.org/wiki/User:Fae On Mon, 18 Jan 2021 at 13:42, Lucy Crompton-Reid <lucy.crompton-reid(a)wikimedia.org.uk> wrote: