collection of PII for account reinstatement appears not covered in Privacy Policy

[SteveTownsend]

Wanted to clarify what seemed to me like a legal grey area.
I sent emails to the moderation bucket but have not heard back.

#1

I run the community labeler @pef-moderation.org
Personal account @stevetownsend0.bsky.social
Non-public content reviewer account @.bsky.social

An acquaintance tells me that their account was suspended, and they are being asked for ID as part of your appeal flow. Why is the bar higher for reinstatement, possibly after moderation error, than for a new account?

If you need ID to prove authenticity, make that a condition of new accounts, to avoid this waste of everybody's time. Otherwise, review the moderation decision and give a Y/N answer.

My $.02

Regards
Steve Townsend

#2

Further to this, collection of government ID appears to be outside the scope of current privacy policy per https://bsky.social/about/support/privacy-policy#personal-information-collect

Doesn't this account reinstatement process collecting government ID put the platform in a legal grey area, at best?

Additional info:
Handling of government ID and other PII is very strictly regulated, varying by jurisdiction. The fact that Privacy Policy does not seem to allow for collection of official ID may present exposure to e.g. class action lawsuit in the US, GDPR violations in the EU, ...