Editing User:Raidarr/Processes

Work in progress covering some common stuff, leaning heavily into what would interest T&S. This is not live/binding and is subject to review.

==Self Requested Lock, Vanish and GDPR==
This should NOT be done lightly. Users who do it should be sure they will never have a reason to come back and that this isn't an instinctive response after some drama.

A waiting period of at least 24 hours should take place to affirm this and if desired a confirmation can be requested. These terms may expand if a user has a history of making these requests.

For a lock:
* Visit their [[Special:CentralAuth]].
* Review their wikis. If there are non-deleted wikis they had permissions on, they're leaving, so they no longer need those. If a wiki is left without operators using this check it should be placed under conservatorship or deleted, depending on the content. If there is substantial content, it should be asked what the operator wants done with their wikis. 
* Lock accordingly. This is reversible but it should be stressed that locks are not done lightly.
* If the user is being struck for bad conduct, make a note that the request is 'under a cloud'. Self requested locks cannot circumvent abuse investigation or sanctions.

For a GDPR request:
* We will humor this regardless if the user is an EU citizen, it's simpler this way.
* Same steps apply for reviewing wikis.
* If the request is under a cloud, complete necessary actions first; GDPR cannot be invoked to get around investigation or sanction for abuse and as-needed records of the abuse may continue to exist if necessary.
* Note that account deletion or total GDPR compliance is not feasible, as WikiOasis will not remove every statement of usernames on WO or immediately related platforms (in other words old username will still appear in edits), will not censure mentions from other users, and will not remove an editor's contribution history from wikis on the platform.* The disruption of these actions and potential workload to do each and every aspect is not something WikiOasis wishes to take on.
* WikiOasis '''can''' anonymize the account username, remove password/email/other credential information, and wipe IP data unless it has been specifically gathered for abuse investigation.
* technical steps here, I never actually did this so I don remember. oof

If the user wants to 'delete their account':
*Not technically possible, refer to this guidance to choose an option. GDPR action is closer.

<nowiki>*</nowiki>WikiOasis will suppress revisions that provide PII as identified in ''PII and removal''.

This process can be done by [[Stewards]], with review or action by [[Trust and Safety]] as necessary for GDPR claims.

==PII and removal==
This includes doxxing and other unwanted sharing of inappropriate information.

Protected information includes:
* Real first/last name
* Email address, phone number, confidential identities (ex, facebook accounts not publicly linked)
** Discord handles generally do not count if for example the user has joined our public discord server. If done to dox an unrelated user, we will remove it.
* IP address
* Real address
* list subject to change right now

Users may share certain information such as their email or other contacts if necessary, but we discourage any sharing beyond what is needed, in the interest of privacy. Other protected information such as personal home addresses will be removed even if the information is posted by a resident in good faith.

This process can be done by [[Stewards]], with review or action by [[Trust and Safety]].

==DMCA/Copyright==
WikiOasis strongly recommends informally contacting a wiki operator to remove infringing content: if the operator is following our policies they will comply. If this is not the case, please contact WikiOasis as follows.
* message the email seen on our [[Main Page]]

WikiOasis will need some time to review the request as we are volunteer staff with busy lives. We are not lawyers, but we do our best to ensure a request is truthful (false or incorrectly field submissions WILL be rejected), respects the rights of everyone involved (proper licensing will be reviewed, fair use will be considered, infringements will be acted on) and addressed correctly (the content will be removed, taken down with the potential of a counter-claim/appeal, or left up if the case is improper).

This process can be done by [[Stewards]], but may escalate immediately to [[Trust and Safety]] depending on the submission.

==Harassment==
tbd


==Staff Misconduct==
If you believe you have been mistreated by a member of Staff (tech, stewards, etc), we encourage you to report the circumstance for review. Anything from inappropriate access or activity from Tech, to bad showings from Stewards, to harassment on our platforms. Please message an uninvolved staffer and explain the situation. All staff are expected to use discretion, including to preserve anonymity if needed.

We recommend contacting [[Trust and Safety]] in most cases to investigate, however if this is an issue with T&S itself message another executive volunteer and it will be reviewed by the WikiOasis senior staff collectively.

==T&S supporting guides==
* [[mw:GDPR_(General_Data_Protection_Regulation)_and_MediaWiki_software]]
@@ Line 58: / Line 58: @@
 We recommend contacting [[Trust and Safety]] in most cases to investigate, however if this is an issue with T&S itself message another executive volunteer and it will be reviewed by the WikiOasis senior staff collectively.
-==Non disclosure & expectations==
-WikiOasis does not have a legally binding non disclosure process or indeed much recourse if a volunteer went rogue with their access. However it will commit to an informal one with severe penalties including termination from sensitive access, blacklisting as relevant to other related farms and projects, termination of service and reporting to authorities as appropriate. These steps will generally be determined by Trust and Safety, hopefully very rarely or never.
-Each volunteer has obligations.
-* Keep private user information private. You may be exposed to emails, IPs, other information nobody in public has a right to see. Do not share with people who do not have a right to access. Ask Trust and Safety if unsure.
-* Maintain a minimum standard of security. A good password, 2FA if possible, good browsing habits, never share account access, and take immediate steps if you find yourself compromised even if it's on an unrelated website.
-* Use discretion: beyond sensitive user information, avoid sharing internal discussion or procedures unless explicitly agreed on.
-* Set an example: we're not perfect, but we can do our best. Also, WikiOasis can be impacted by the actions of its staff on other platforms. Keep this in mind even if you really really dislike NastyGuy from PrettyTerribleFarm.
 ==T&S supporting guides==
 * [[mw:GDPR_(General_Data_Protection_Regulation)_and_MediaWiki_software]]