申訴專員委員會/2025年/給使用者查核員的建議
 |
About the commission — Make a report — Email the commission — Discuss the commission |
| 活動報告： 2024年 • 2023年 • 2022年 • Earlier Published decisions |
On 25 March 2025, the Ombuds Commission published the following public statement:
親愛的查核員您好：
It has come to the attention of the Ombuds Commission that a number of checkusers, across several projects, are not correctly applying the constraints on information sharing imposed by the Access to Nonpublic Personal Data Policy (commonly known as the ANPDP). The goal of this letter is to remind all checkusers (by which we mean anybody with checkuser access) about one issue that we commonly see: the sharing of IP addresses which have been used by registered accounts as exposed by the checkuser tool. In a nutshell, a checkuser may not publicly connect an IP address with a registered account when that connection is informed by CheckUser data. The only people you may share this information with are other checkusers, and then only through communication channels which are private. Acceptable channels include:
- 發送電子郵件給另一位使用者查核員
- checkuser-l@lists.wikimedia.org電子郵件列表
- IRC上的#wikimedia-checkuser頻道
- 不公開的checkuser wiki (checkuser.wikimedia.org)
Examples of unacceptable channels include:
- 發布在任何公開維基媒體項目
- Posting to any mailing list, IRC, Discord, etc which is not specifically configured to handle this kind of information securely
- Email (IRC, Discord, etc) to any non-checkuser, even if they are an admin, patroller, or other trusted position on your project other than checkuser.
During the normal course of their duties, checkusers are frequently asked questions by members of their local community. Here are some examples of questions you might get and acceptable ways you might answer them:
- Q: UserːX是UserːY的傀儡嗎?
- A:根據使用者查核數據，這兩個帳號似乎是(或不是)同一個人
- Q: What IP addresses is User:X using?
- A: I cannot provide that information
- Q: Is User:X using IP address w.x.y.z?
- A: I cannot provide that information
- Q: Are the IP addresses a1.a2.a3.a4 and b1.b2.b3.b4 being used by the same person?
- A: I cannot provide that information
- Q: In what country is User:X located?
- A: This one is a bit of a grey area. There are some situations where it is permissible to disclose geolocation information, but our best advice is to be more conservative and just say that you cannot provide that information.
Also note that the past history of the user does not alter the privacy mandate. For example, none of the following are valid exceptions to the privacy policy:
- 使用者是破壞者
- 使用者是一位長期濫用者
- The user has already been blocked, globally locked, or banned
- 已知用戶之前曾使用過傀儡
申訴專員委員會