This provision states that X may retain account identifiers, including email address and phone number, indefinitely for users whose accounts are suspended for Rules violations, for the stated purpose of preventing creation of new accounts by repeat policy offenders.
This analysis describes what X's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes indefinite retention of personal identifiers for suspended accounts, which may require evaluation under GDPR's storage limitation principle (Article 5(1)(e)) and similar data minimization obligations in other jurisdictions, as GDPR generally requires that personal data be kept no longer than necessary for the purpose for which it was collected.
⚠ Email address and phone number associated with a suspended account may be retained by X indefinitely as stated in the terms
Cross-platform context
See how other platforms handle Indefinite Retention of Suspended Account Identifiers and similar clauses.
Compare across platforms →"Where you violate our Rules and your account is suspended, we may keep the identifiers you used to create the account (such as your email address or phone number) indefinitely to prevent repeat policy offenders from creating new accounts.Excerpt from X's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision directly engages GDPR's storage limitation principle (Article 5(1)(e)), which requires personal data to be kept no longer than necessary for the stated purpose, as enforced by the Irish Data Protection …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes indefinite retention of personal identifiers for suspended accounts, which may require evaluation under GDPR's storage limitation principle (Article 5(1)(e)) and similar data minimization obligations in other jurisdictions, as GDPR generally requires that personal data be kept no longer than necessary for the purpose for which it was collected.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by X.