Legal:Confidentiality agreement for nonpublic information: Difference between revisions

From Wikimedia Foundation Governance Wiki
Content deleted Content added
reuse old translation marker number as they are so similar
m →‎top: clean up using AWB, replaced: |noerror}} → }}
 
(42 intermediate revisions by 20 users not shown)
Line 1: Line 1:
<languages />{{DISPLAYTITLE:<translate><!--T:47--> Wikimedia Foundation Confidentiality Agreement for Nonpublic Information</translate>}}
<languages />
{{Help translate/Access to nonpublic information policy}}
{{Help translate/Access to nonpublic personal data policy}}
{{info
{{info
| 1 =
| 1 = <translate><!--T:40-->
The Wikimedia Foundation approved a new [[<tvar name="1">Special:MyLanguage/Policy:Access to nonpublic personal data policy</tvar>|Access to nonpublic personal data policy]] on 6 November 2018. In accordance with this policy, volunteers with access to nonpublic personal data (such as [[<tvar name="2">:m:Special:MyLanguage/VRT</tvar>|VRT]] volunteers, [[<tvar name="3">:m:Special:MyLanguage/CheckUser policy</tvar>|CheckUsers]], [[<tvar name="4">:m:Special:MyLanguage/Oversight policy</tvar>|Oversighters]], and [[<tvar name="5">:m:Special:MyLanguage/Stewards</tvar>|Stewards]]) are required to sign this confidentiality agreement in order to maintain or receive their access to nonpublic personal data. [[<tvar name="6">Special:MyLanguage/Legal:Confidentiality agreement for nonpublic information/How to sign</tvar>|Instructions on how to sign the agreement are available.]] The Foundation shall not grant Foundation volunteer NDA recognition to applicant(s) for volunteer roles if the applicants live in jurisdictions that block(ed) access to Wikimedia projects AND there is reason to believe that their domicile is known to others than the individual applicant(s) and the Foundation. Exemptions may be granted in individual cases following a request for review by the Legal department. Granting such NDAs would put the applicant(s) as well as other volunteers relying on the Foundation's platform at undue risk. All NDA-based access rights granted to users fulfilling both criteria in the proposed adjustment shall be revoked at the point of policy adjustment.</translate>
<translate><!--T:40-->
The Wikimedia Foundation approved a new [[<tvar|policy>Special:MyLanguage/Access to nonpublic personal data policy</>|Access to nonpublic personal data policy]] on 6 November 2018. In accordance with this policy, volunteers with access to nonpublic personal data (such as [[<tvar|otrs>Special:MyLanguage/OTRS</>|OTRS]] volunteers, [[<tvar|cu>Special:MyLanguage/CheckUser policy</>|CheckUsers]], [[<tvar|oversight>Special:MyLanguage/Oversight policy</>|Oversighters]], and [[<tvar|stewards>Special:MyLanguage/Stewards</>|Stewards]]) are required to sign this confidentiality agreement in order to maintain or receive their access to nonpublic personal data. [[<tvar|howto-sign>Special:MyLanguage/Confidentiality agreement for nonpublic information/How to sign</>|Instructions on how to sign the agreement are available.]]
</translate>


<small><translate><!--T:42--> ''NOTE:'' The document intentionally states "X years of age" as the documents actually being signed may say either 16 years of age or 18 years of age depending on the role of the person signing it. The documents on Legalpad which volunteers are signing reflect the correct age for that specific document.</translate></small>
<small>
<translate><!--T:42-->
''NOTE:'' The document intentionally states "X years of age" as the documents actually being signed may say either 16 years of age or 18 years of age depending on the role of the person signing it. The documents on Legalpad which volunteers are signing reflect the correct age for that specific document.</translate></small>
}}
}}
<div style="margin:1ex 0;border:1px solid #AAA;background:#FFF;color:#000;padding:1ex">
<div style="margin:1ex 0;border:1px solid #AAA;background:#FFF;color:#000;padding:1ex">


<div style="text-align:center;font-size:120%">
<div style="text-align:center;font-size:120%">
'''<translate><!--T:1-->
'''<translate><!--T:1--> Confidentiality Agreement - nonpublic personal data</translate>'''
Confidentiality Agreement - nonpublic personal data</translate>'''
</div>
</div>


Line 21: Line 16:
You provide critical and valuable services and support to the Wikimedia movement, and the success of our projects depends on authorized Wikimedia community members like you. In return, you may be entrusted with confidential nonpublic personal data, including private user information. This agreement between you and the Wikimedia Foundation reflects our mutual commitment to protecting that information. By digitally signing and submitting this document you certify that you are at least X years of age and acknowledge that you have reviewed and agree to this confidentiality agreement, which is between you and the Wikimedia Foundation.</translate>
You provide critical and valuable services and support to the Wikimedia movement, and the success of our projects depends on authorized Wikimedia community members like you. In return, you may be entrusted with confidential nonpublic personal data, including private user information. This agreement between you and the Wikimedia Foundation reflects our mutual commitment to protecting that information. By digitally signing and submitting this document you certify that you are at least X years of age and acknowledge that you have reviewed and agree to this confidentiality agreement, which is between you and the Wikimedia Foundation.</translate>


'''<translate><!--T:3-->
'''<translate><!--T:3--> Nonpublic personal data.</translate>'''
nonpublic personal data.</translate>'''
<translate><!--T:4-->
<translate><!--T:4-->
Nonpublic personal data is private information, including private user information, which you receive either through the use of tools provided to you as an authorized Wikimedia community member or from other such members. Nonpublic personal data includes [[wmf:Privacy_policy#Definitions|"personal information" as defined by the Wikimedia Privacy Policy]], IP addresses, and other personally identifying information that are not otherwise publicly available. It does not include information about a user that that user has made public on the Wikimedia projects.</translate>
Nonpublic personal data is private information, including private user information, which you receive either through the use of tools provided to you as an authorized Wikimedia community member or from other such members. Nonpublic personal data includes [[<tvar name="1">Special:MyLanguage/Policy:Privacy policy#definitions</tvar>|"personal information" as defined by the Wikimedia Privacy Policy]], IP addresses, and other personally identifying information that are not otherwise publicly available. It does not include information about a user that that user has made public on the Wikimedia projects.</translate>


'''<translate><!--T:43-->
'''<translate><!--T:43--> Exceptions to nonpublic personal data.</translate>'''
Exceptions to nonpublic personal data.</translate>'''
<translate><!--T:44-->
<translate><!--T:44-->
Nonpublic personal data does not include any information which (a) was publicly available at the time of disclosure; (b) became publicly available after disclosure without breach of this policy by you; (c) was in your possession before disclosure, as evidenced by your written records, and was not part of an earlier confidential provision of a Wikimedia policy; or (d) is required by law to be disclosed by you, but you promise to give WMF prompt notice of such legal requirement and comply with any protective order imposed on such disclosure.</translate>
Nonpublic personal data does not include any information which (a) was publicly available at the time of disclosure; (b) became publicly available after disclosure without breach of this policy by you; (c) was in your possession before disclosure, as evidenced by your written records, and was not part of an earlier confidential provision of a Wikimedia policy; or (d) is required by law to be disclosed by you, but you promise to give the Wikimedia Foundation prompt notice of such legal requirement and comply with any protective order imposed on such disclosure.</translate>


'''<translate><!--T:33-->
'''<translate><!--T:33--> Authorized community members.</translate>'''
Authorized community members.</translate>'''
<translate><!--T:34-->
<translate><!--T:34-->
Authorized community members are Wikimedia users who are entrusted, through a valid community- or foundation-run process, with information covered by the [[wmf:Privacy policy|Wikimedia Privacy Policy]]. This includes community members with access to any tool that permits them to view nonpublic information about other users or members of the public, community members with the ability to access content or user information which has been removed from administrator view, and volunteer developers with access to nonpublic personal data. Authorized Wikimedia community members may include, for example, oversighters, checkusers, volunteer developers, and other similar authorized roles.</translate>
Authorized community members are Wikimedia users who are entrusted, through a valid community- or foundation-run process, with information covered by the [[<tvar name="1">Special:MyLanguage/Policy:Privacy policy</tvar>|Wikimedia Privacy Policy]]. This includes community members with access to any tool that permits them to view nonpublic information about other users or members of the public, community members with the ability to access content or user information which has been removed from administrator view, and volunteer developers with access to nonpublic personal data. Authorized Wikimedia community members may include, for example, oversighters, checkusers, volunteer developers, and other similar authorized roles.</translate>


'''<translate><!--T:5-->
'''<translate><!--T:5--> Protection of nonpublic personal data.</translate>'''
Protection of nonpublic personal data.</translate>'''
<translate><!--T:6--> You agree to:</translate>
<translate><!--T:6-->
You agree to:</translate>


* <translate><!--T:7--> Comply with the Privacy Policy; the [[<tvar name="1">Special:MyLanguage/Policy:Access to nonpublic personal data policy</tvar>|Access to nonpublic personal data Policy]]; and any other applicable and nonconflicting community policy relating to nonpublic information;</translate>
* <translate><!--T:7-->
* <translate><!--T:8--> Refrain from disclosing nonpublic personal data to anyone, except as permitted under those policies;</translate>
Comply with the Privacy Policy; the [[<tvar|ANIPlink>Access to nonpublic personal data policy</>|Access to nonpublic personal data Policy]]; and any other applicable and nonconflicting community policy relating to nonpublic information;</translate>
* <translate><!--T:8-->
* <translate><!--T:31--> Reasonably safeguard your account against unauthorized access and use;</translate>
Refrain from disclosing nonpublic personal data to anyone, except as permitted under those policies;</translate>
* <translate><!--T:9--> Engage in the access, use, and disclosure of nonpublic personal data only as needed and allowed in your role as an authorized Wikimedia community member; and</translate>
* <translate><!--T:10--> Email <tvar name="1"><code>check-disclosure{{@}}wikimedia.org</code></tvar> an explanation of the nonpublic personal data you wish to disclose to outside parties such as law enforcement at least 10 days prior to the date of your anticipated disclosure.</translate>
* <translate><!--T:31-->
Reasonably safeguard your account against unauthorized access and use;</translate>
* <translate><!--T:9-->
Engage in the access, use, and disclosure of nonpublic personal data only as needed and allowed in your role as an authorized Wikimedia community member; and</translate>
* <translate><!--T:10-->
Email <tvar|disclosureemail><tt>check-disclosure{{@}}wikimedia.org</tt></> an explanation of the nonpublic personal data you wish to disclose to outside parties such as law enforcement at least 10 days prior to the date of your anticipated disclosure.</translate>


'''<translate><!--T:12-->
'''<translate><!--T:12--> Violation.</translate>'''
Violation.</translate>''' <translate><!--T:13-->
<translate><!--T:13-->
You agree that, in case of a violation of this agreement, including improper access, use, or disclosure of nonpublic personal data:</translate>
You agree that, in case of a violation of this agreement, including improper access, use, or disclosure of nonpublic personal data:</translate>


* <translate><!--T:14-->
* <translate><!--T:14--> You will notify the Wikimedia Foundation of the violation immediately;</translate>
* <translate><!--T:15--> You will delete or otherwise destroy all nonpublic personal data in your possession and control, if instructed by the Wikimedia Foundation;</translate>
You will notify the Wikimedia Foundation of the violation immediately;</translate>
* <translate><!--T:15-->
* <translate><!--T:16--> Your access to nonpublic personal data may be terminated; and</translate>
* <translate><!--T:17--> The Wikimedia Foundation may pursue available legal remedies, including injunctive relief or, in the case of willful intent, monetary damages.</translate>
You will delete or otherwise destroy all nonpublic personal data in your possession and control, if instructed by the Wikimedia Foundation;</translate>
* <translate><!--T:16-->
Your access to nonpublic personal data may be terminated; and</translate>
* <translate><!--T:17-->
The Wikimedia Foundation may pursue available legal remedies, including injunctive relief or, in the case of willful intent, monetary damages.</translate>


'''<translate><!--T:18-->
'''<translate><!--T:18--> Other provisions.</translate>'''
Other provisions.</translate>''' <translate><!--T:19-->
<translate><!--T:19--> You also agree that:</translate>
You also agree that: </translate>


* <translate><!--T:20--> This agreement does not create an employment, agency, partnership, or joint venture relationship between you and the Wikimedia Foundation;</translate>
* <translate><!--T:20-->
* <translate><!--T:21--> You may not transfer or assign your rights or obligations under this agreement;</translate>
This agreement does not create an employment, agency, partnership, or joint venture relationship between you and the Wikimedia Foundation;</translate>
* <translate><!--T:22--> You are solely responsible for how you access and use nonpublic personal data, and your activity or account may be reviewed by other authorized users or the Wikimedia Foundation; and</translate>
* <translate><!--T:21-->
* <translate><!--T:23--> The laws of the State of California and the United States of America will govern this agreement (without reference to conflict of laws principles).</translate>
You may not transfer or assign your rights or obligations under this agreement;</translate>
* <translate><!--T:22-->
You are solely responsible for how you access and use nonpublic personal data, and your activity or account may be reviewed by other authorized users or the Wikimedia Foundation; and</translate>
* <translate><!--T:23-->
The laws of the State of California and the United States of America will govern this agreement (without reference to conflict of laws principles).</translate>


</div>
</div>

<div style="margin:1ex 0;border:1px solid #AAA;background:#FFF;color:#000;padding:1ex">
<div style="margin:1ex 0;border:1px solid #AAA;background:#FFF;color:#000;padding:1ex">


<div style="text-align:center;font-size:120%">
<div style="text-align:center;font-size:120%">
'''<translate><!--T:24-->
'''<translate><!--T:24--> Interface</translate>'''
Interface</translate>'''
</div>
</div>


<translate><!--T:25-->
<translate><!--T:25-->
By typing your name below, clicking the check box, and clicking the “Sign Document” ("<tvar|english-sign-doc>Sign Document</>") button below, you acknowledge that you have reviewed and agree to this confidentiality agreement between you and the Wikimedia Foundation. Among other things, you must: </translate>
By typing your name below, clicking the check box, and clicking the "Sign Document" ("<tvar name="1">Sign Document</tvar>") button below, you acknowledge that you have reviewed and agree to this confidentiality agreement between you and the Wikimedia Foundation. Among other things, you must:</translate>


: <translate><!--T:26--> (1) Keep nonpublic personal data, as defined in this confidentiality agreement, confidential;</translate>
: <translate><!--T:26-->
: <translate><!--T:27--> (2) Obtain prior written approval from the Wikimedia Foundation if you determine such information should be disclosed to any outside parties, such as law enforcement;</translate>
(1) Keep nonpublic personal data, as defined in this confidentiality agreement, confidential;</translate>
: <translate><!--T:28--> (3) Comply with the [[<tvar name="1">Special:MyLanguage/Policy:Privacy policy</tvar>|Wikimedia Privacy Policy]] and the [[<tvar name="2">Special:MyLanguage/Policy:Access to nonpublic personal data policy</tvar>|Access to nonpublic personal data Policy]]; and</translate>
: <translate><!--T:27-->
(2) Obtain prior written approval from the Wikimedia Foundation if you determine such information should be disclosed to any outside parties, such as law enforcement;</translate>
: <translate><!--T:29--> (4) Provide to the Wikimedia Foundation a valid email address linked to the account under which you have or are applying for access rights.</translate>
</div>
: <translate><!--T:28-->
<translate>
(3) Comply with the [[<tvar|pplink>wmf:Privacy policy</>|Wikimedia Privacy Policy]] and the [[<tvar|ANIPlink>Access to nonpublic personal data policy</>|Access to nonpublic personal data Policy]]; and</translate>
=== Miscellaneous text for translation purposes === <!--T:46-->
: <translate><!--T:29-->
(4) Provide to the Wikimedia Foundation a valid email address linked to the account under which you have or are applying for access rights.


<!--T:41-->
<!--T:41-->
By typing your name below, clicking the check box, and clicking the “Sign Document” ("<tvar|english-sign-doc>Sign Document</>") button below, you acknowledge that you have reviewed and agree both to this confidentiality agreement between you and the Wikimedia Foundation as well as the [[<tvar|otrs-agreement>Special:MyLanguage/OTRS/Confidentiality_Agreement</>|OTRS confidentiality agreement]]. Among other things, you must:
By typing your name below, clicking the check box, and clicking the "Sign Document" ("<tvar name="1">Sign Document</tvar>") button below, you acknowledge that you have reviewed and agree both to this confidentiality agreement between you and the Wikimedia Foundation as well as the [[<tvar name="2">:m:Special:MyLanguage/VRT/Confidentiality agreement</tvar>|VRT confidentiality agreement]]. Among other things, you must:

<!--T:35-->
18 years of age

<!--T:36-->
16 years of age


<!--T:38-->
<!--T:38-->
Line 111: Line 80:


<!--T:39-->
<!--T:39-->
OTRS Users Confidentiality Agreement - Nonpublic personal data
VRTS Users Confidentiality Agreement - Nonpublic personal data
</translate>
<div style="margin:0 auto;text-align:center">
<span style="margin:1em;border:1px outset #AAA;padding:2px 0.5em">'''<translate><!--T:30-->
Submit</translate>'''
</span></div>


<!--T:30-->
</div>
Submit</translate>
{{TNT|Privacy policy navigation 2|nocat=1}}

{{Privacy policy navigation 2|nocat=1}}


[[Category:Access to nonpublic information policy{{#translation:}}]]
[[Category:Access to nonpublic personal data policy{{#translation:}}]]

Latest revision as of 07:08, 30 March 2024

Confidentiality Agreement - nonpublic personal data

You provide critical and valuable services and support to the Wikimedia movement, and the success of our projects depends on authorized Wikimedia community members like you. In return, you may be entrusted with confidential nonpublic personal data, including private user information. This agreement between you and the Wikimedia Foundation reflects our mutual commitment to protecting that information. By digitally signing and submitting this document you certify that you are at least X years of age and acknowledge that you have reviewed and agree to this confidentiality agreement, which is between you and the Wikimedia Foundation.

Nonpublic personal data. Nonpublic personal data is private information, including private user information, which you receive either through the use of tools provided to you as an authorized Wikimedia community member or from other such members. Nonpublic personal data includes "personal information" as defined by the Wikimedia Privacy Policy, IP addresses, and other personally identifying information that are not otherwise publicly available. It does not include information about a user that that user has made public on the Wikimedia projects.

Exceptions to nonpublic personal data. Nonpublic personal data does not include any information which (a) was publicly available at the time of disclosure; (b) became publicly available after disclosure without breach of this policy by you; (c) was in your possession before disclosure, as evidenced by your written records, and was not part of an earlier confidential provision of a Wikimedia policy; or (d) is required by law to be disclosed by you, but you promise to give the Wikimedia Foundation prompt notice of such legal requirement and comply with any protective order imposed on such disclosure.

Authorized community members. Authorized community members are Wikimedia users who are entrusted, through a valid community- or foundation-run process, with information covered by the Wikimedia Privacy Policy. This includes community members with access to any tool that permits them to view nonpublic information about other users or members of the public, community members with the ability to access content or user information which has been removed from administrator view, and volunteer developers with access to nonpublic personal data. Authorized Wikimedia community members may include, for example, oversighters, checkusers, volunteer developers, and other similar authorized roles.

Protection of nonpublic personal data. You agree to:

  • Comply with the Privacy Policy; the Access to nonpublic personal data Policy; and any other applicable and nonconflicting community policy relating to nonpublic information;
  • Refrain from disclosing nonpublic personal data to anyone, except as permitted under those policies;
  • Reasonably safeguard your account against unauthorized access and use;
  • Engage in the access, use, and disclosure of nonpublic personal data only as needed and allowed in your role as an authorized Wikimedia community member; and
  • Email check-disclosure@wikimedia.org an explanation of the nonpublic personal data you wish to disclose to outside parties such as law enforcement at least 10 days prior to the date of your anticipated disclosure.

Violation. You agree that, in case of a violation of this agreement, including improper access, use, or disclosure of nonpublic personal data:

  • You will notify the Wikimedia Foundation of the violation immediately;
  • You will delete or otherwise destroy all nonpublic personal data in your possession and control, if instructed by the Wikimedia Foundation;
  • Your access to nonpublic personal data may be terminated; and
  • The Wikimedia Foundation may pursue available legal remedies, including injunctive relief or, in the case of willful intent, monetary damages.

Other provisions. You also agree that:

  • This agreement does not create an employment, agency, partnership, or joint venture relationship between you and the Wikimedia Foundation;
  • You may not transfer or assign your rights or obligations under this agreement;
  • You are solely responsible for how you access and use nonpublic personal data, and your activity or account may be reviewed by other authorized users or the Wikimedia Foundation; and
  • The laws of the State of California and the United States of America will govern this agreement (without reference to conflict of laws principles).

Interface

By typing your name below, clicking the check box, and clicking the "Sign Document" ("Sign Document") button below, you acknowledge that you have reviewed and agree to this confidentiality agreement between you and the Wikimedia Foundation. Among other things, you must:

(1) Keep nonpublic personal data, as defined in this confidentiality agreement, confidential;
(2) Obtain prior written approval from the Wikimedia Foundation if you determine such information should be disclosed to any outside parties, such as law enforcement;
(3) Comply with the Wikimedia Privacy Policy and the Access to nonpublic personal data Policy; and
(4) Provide to the Wikimedia Foundation a valid email address linked to the account under which you have or are applying for access rights.

Miscellaneous text for translation purposes

By typing your name below, clicking the check box, and clicking the "Sign Document" ("Sign Document") button below, you acknowledge that you have reviewed and agree both to this confidentiality agreement between you and the Wikimedia Foundation as well as the VRT confidentiality agreement. Among other things, you must:

General Confidentiality Agreement - Nonpublic personal data

VRTS Users Confidentiality Agreement - Nonpublic personal data

Submit

Privacy-related pages