What can I do about this clause?

{'method': 'WEB_FORM', 'recipient': 'https://help.x.com/en/rules-and-policies/personal-information', 'difficulty': 'MODERATE', 'action_type': 'DELETE_DATA', 'instructions': "Visit X's Private Information Policy page, then use the in-platform 'Report' function on the offending post, selecting 'It's abusive or harmful' > 'Private information' to request removal of your personal data.", 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'FTC', 'reason': 'FTC has authority over deceptive privacy practices on digital platforms, including failure to enforce stated anti-doxxing policies.', 'complaint_url': 'https://reportfraud.ftc.gov/'}, {'agency': 'State_AG', 'reason': 'State attorneys general can enforce state privacy laws including CCPA and New York SHIELD Act where private information is exposed without consent.', 'complaint_url': 'https://www.naag.org/find-my-ag/'}

What is the severity of this clause?

ConductAtlas classifies this Private Information Policy (Anti-Doxxing) clause as high severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Private Information Policy (Anti-Doxxing) — X

Share 𝕏 Share in Share 🔒 PDF

What it is

X prohibits users from posting other people's private personal information — such as addresses, phone numbers, or financial details — without their consent, commonly known as doxxing.

Consumer impact (what this means for users)

Your home address, phone number, financial details, or other private identifying information posted on X without your permission may be removable under this policy by filing a report, but users bear the burden of initiating the reporting process themselves.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Delete Your Data

Visit X's Private Information Policy page, then use the in-platform 'Report' function on the offending post, selecting 'It's abusive or harmful' > 'Private information' to request removal of your personal data.

Cross-platform context

See how other platforms handle Private Information Policy (Anti-Doxxing) and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

If someone posts your private personal information on X without your consent, you can report it for removal under this policy — but X's enforcement is discretionary and not guaranteed to be immediate.

View original clause language

Learn about how X handles unauthorized posting of private information, also known as doxxing, and how to report it.

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: This provision implicates GDPR Articles 5 and 17 (data minimisation and right to erasure) for EU users, CCPA §1798.100 for California residents, and potentially 18 U.S.C. §2261A (cyberstalking) where doxxing facilitates stalking or harassment. State-level privacy statutes including New York SHIELD Act and Illinois BIPA may also apply. FTC Act Section 5 applies to deceptive privacy practices. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

FTC

FTC has authority over deceptive privacy practices on digital platforms, including failure to enforce stated anti-doxxing policies.
File a complaint →
State AG

State attorneys general can enforce state privacy laws including CCPA and New York SHIELD Act where private information is exposed without consent.
File a complaint →

Provision details

Document information

Document

X Rules and Policies

Entity

Document last updated

April 29, 2026

Tracking information

First tracked

March 7, 2026

Last verified

April 27, 2026

Record ID

CA-P-003258

Document ID

CA-D-00031

Evidence Provenance

Source URL

https://help.twitter.com/en/rules-and-policies

Wayback Machine

View archived versions →

SHA-256

a40c648df367cf76bbff42c2354e1c68fc4ce94f1ddb702436598ca1b5d49ad6

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: X | Document: X Rules and Policies | Record: CA-P-003258
Captured: 2026-03-07 12:17:50 UTC | SHA-256: a40c648df367cf76…
URL: https://conductatlas.com/platform/x/x-rules-and-policies/private-information-policy-anti-doxxing/
Accessed: May 2, 2026

Classification

Severity

High

Private Information Policy (Anti-Doxxing)