Latest / The Privacy Partnership Podcast with Robert Bateman
Discord's photo ID breach: Are the UK GDPR and Online Safety Act to blame?
Send us Fan Mail
Discord's recent data breach exposed photo IDs used to verify users' ages. Should we blame the Online Safety Act, the Children's Code, or the UK GDPR? It's complicated. (Please excuse the unsightly cut on my forehead in this one).
While this breach probably just boils down to vendor security, I wanted to consider whether Discord was obliged to collect users' ID documents, and whether it should have been retaining them.
This story does involve some competing obligations under the OSA and the UK GDPR.
I think Discord was required to verify ages—not necessarily via photo ID, but…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.