this post was submitted on 11 Feb 2026
494 points (95.1% liked)
Technology
81653 readers
4063 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
If Discord cared about this, they’d use the same identity platforms governments use. For example, in the US, id.me is a requirement for many federal services. While it does deanonymize me and there are privacy concerns expanding this tech beyond government services, I trust id.me to take my data security seriously. It has to have federal security requirements. If their data is breached, there will be repercussions and reparations.
Discord, on the other hand, uses random vendors. There were no repercussions or reparations for the previous leak. Discord said moving forward they’d require SOC2 Type II or ISO 27001 for vendors. Crucially, neither of these certifications matter a fucking iota for personally identifiable information and Discord itself will not be completely them so even if the vendors were PII secure Discord will not hold itself to the same standards. Discord does not care about its users; Discord only cares about the ad revenue this will open up.
If they cared about handling of PII they should require ISO 27701
Oh absolutely. More importantly Discord needs to also follow the standard, not just require it of their vendors. Granted this source is the only place I can find they’re requiring that so that might not actually be true. It kinda reads like an AI summary.