Oversight policy

The following page documents an official global policy.
This page has been developed and approved by the community and its compliance is mandatory for all projects. It must not be modified without prior community approval.

For legal and security reasons, the Wikimedia Foundation has decided to require two-factor authentication for this role.

Oversight or suppression refers to hiding revisions, edit summaries, usernames, or log entries from the public. This access is available to oversighters, stewards and users in the staff global user group. Suppressed data can only be viewed and restored by users in these groups, with the exception of Ombuds who may view suppressed data (but not restore it).

Oversight and suppression are often used interchangeably. Oversight is derived from the deprecated MediaWiki extension Oversight, which has been replaced by a MediaWiki core feature known as RevisionDelete.

About

Initially, a MediaWiki extension called Oversight was used for hiding data from the public (including administrators); only users with 'oversight' right were able to view content which was oversighted. As it required database access to undo actions, a new system known as RevisionDelete was introduced as part of MediaWiki core in version 1.16 to replace Oversight.

RevisionDelete allowed suppressed edits and log entries to be restored without querying the database directly. In addition, it clearly identified in the page history what edits had been suppressed. In 2015, after converting the old oversighted actions to suppressed actions, the Oversight extension was removed from all Wikimedia wikis.

With MediaWiki's RevisionDelete feature, revision texts, edit summaries, and editor's username/IP address can be suppressed from page histories. On log entries, it is possible to suppress the target and parameters, edit summary, and the performer's username. Additionally, with 'hideuser' right, oversighters are able to suppress a username from all page edits and log entries when blocking a user.

Suppressions are logged privately and this log is only visible to the users in the aforementioned groups through Special:Log/suppress.

Rights

On Wikimedia wikis, users in oversight group have the following rights by default. Some wikis may have different configuration.

'deleterevision' — Delete and undelete specific revisions of pages
'deletelogentry' — Delete and undelete specific log entries
'hideuser' — Block or unblock a username, hiding or unhiding it from the public
'suppressrevision' — View, hide and unhide specific revisions of pages from any user
'suppressionlog' — View private logs
'abusefilter-hide-log' — Hide entries in the abuse log
'abusefilter-hidden-log' — View hidden abuse log entries

IRC channel

There is a private IRC channel (#wikimedia-privacy^connect) to which all oversighters and stewards who use IRC should have access. Contact a steward if you need help gaining access.

Policy

Use

This feature is approved for use in four cases:

Removal of non-public personal information such as phone numbers, home addresses, workplaces or identities of pseudonymous or anonymous individuals who have not made their identity public, or of public individuals who have not made that personal information public.
Removal of potentially libelous information either:
- on the advice of Wikimedia Foundation counsel or
- when the case is clear, and there is no editorial reason to keep the revision.
Removal of copyright violations on the advice of Wikimedia Foundation counsel.
Hiding of blatant attack names on automated lists and logs, where this does not disrupt edit histories. A blatant attack is one obviously intended to denigrate, threaten, libel, insult, or harass someone.

Local oversighters should generally handle local oversighting, when they're available. Stewards may perform local oversighting in emergencies, during crosswiki issues, or if there are no local oversighters available (see contact details).

Access

Oversight access is granted by stewards. This section just describes steward practice and the access to nonpublic personal data policy.

Oversighters must be both 18 years of age and of legal age in their jurisdiction, and willing to sign the Wikimedia Foundation's confidentiality agreement for nonpublic information. They must also be familiar with the privacy policy.

Stewards can see oversighted revisions on all wikis and can grant themselves active oversight rights in emergency cases or on wikis without local oversighters when there’s a valid request. On any wiki, there must be at least two local oversighters, or none at all. This is so that they can mutually control and confirm their actions. If only one oversighter is left on a wiki (usually when the other retires or is removed), the community must appoint a new oversighter immediately or remove the remaining oversighter.

On wikis without an Arbitration Committee, the community must approve oversighters by consensus. The candidates must request it within the local community and advertise this request to the local community properly (community discussion page, mailing list, etc). After gaining consensus (at least 70–80% in pro/con voting or the highest number of votes in multiple choice elections) in their local community, and with at least 25–30 members' approval, the user should request access on Steward requests/Permissions with a link to the community's decision.

On wikis with an Arbitration Committee elected with 25–30 members' approval, users may also be appointed by the Arbitration Committee, unless the local community prefers independent elections. After agreement, a member of the local Arbitration Committee should place a request on Steward requests/Permissions.

Local administrators may also delete the specific revision or log entries containing the oversightable data, but it will continue to be visible to administrators until it is suppressed.

Removal of access

Oversight access is revoked by stewards, using rules adopted from the CheckUser policy. This section just describes steward practice.

Any user account with Oversight access that is inactive for more than a year will have their Oversight access removed.

In case of abusive use of the tool, the steward or the oversighter will have their access removed immediately. This will in particular happen if actions are done routinely without a serious motive to do so (links and proofs of bad behavior should be provided).

Suspicion of abuses of oversight should be discussed by each local wiki. On wikis with an approved Arbitration Committee, the committee can decide on the removal of access. On wikis without an approved Arbitration Committee, the community can vote for removal of access. Removal can only be done by stewards. A steward may not decide to remove access on their own, but can help provide information necessary to prove the abuse (such as logs). If necessary, and in particular in case of lack of respect towards the privacy policy, the Board of Wikimedia Foundation can be asked to declare removal of access as well.

Requests for oversight

This is not the place to request suppression. If you would like to request for hiding data, please note that private details should not be posted in public. See this page for details about how to contact an oversighter.
For urgent cross wiki requests, find a steward in the #wikimedia-stewards^connect IRC channel and contact a steward privately.

Please do not post your request publicly.

All Wikimedia wikis

Stewards can grant themselves temporary oversight access on individual wikis when needed.
Please check if the wiki has their own local oversighters before approaching a steward; the list is below.
Please do not put your request on the wiki or broadcast it on the public IRC channel. All requests should be made privately.
Ombuds have the technical ability to view suppressed revisions.

IRC

Users can contact stewards in the IRC channel #wikimedia-stewards^connect. Please ask for a steward in the channel, then make your request in a private message to that steward. Do not broadcast the request in the public channel. In emergencies type !steward, to get the attention of a steward. For normal requests type instead @steward. Then, in any case, write directly to the steward; usually just clicking on their name.

Email

Send an email to the stewards' VRT private queue at stewards-oversightwikimediaorg (direct wiki interface), or
send an email to any steward privately using Special:EmailUser.

Stewards are explicitly allowed to act in non-emergencies and the requests can go to them too

Wikimedia Commons

Local information page
Automatically generated oversighters' list
Mailing list: oversight-commonslists.wikimedia.org

Meta-Wiki

Local information page
Automatically generated oversighters' list
Mailing list: oversight-metawikimedia.org
Email directly: m:Special:EmailUser/Meta-Wiki oversighters

Wikidata

Local information page
Automatically generated oversighters' list
Mailing list: oversightwikidata.org
Email directly: d:Special:EmailUser/Wikidata Oversight

About

Rights

IRC channel

Policy

Use

Access

Removal of access

Requests for oversight

All Wikimedia wikis

IRC

Email

Belarusian Wikipedia

Bengali Wikipedia

Chinese Wikipedia

English Wikipedia

Finnish Wikipedia

French Wikipedia

German Wikipedia

Indonesian Wikipedia

Italian Wikipedia

Japanese Wikipedia

Korean Wikipedia

Persian Wikipedia

Polish Wikipedia

Portuguese Wikipedia

Russian Wikipedia

Simple English Wikipedia

Spanish Wikipedia

Turkish Wikipedia

Ukrainian Wikipedia

Wikimedia Commons

Meta-Wiki

Wikidata

See also