# Malicious personal messages followed by account self deletion

**URL:** <https://meta.discourse.org/t/malicious-personal-messages-followed-by-account-self-deletion/125158>\
**Category:** Bug\
**Created:** [August 7, 2019, 6:17pm UTC](https://meta.discourse.org/t/malicious-personal-messages-followed-by-account-self-deletion/125158 "2019-08-07T18:17:19Z")\
**Posts on this page:** 5\
**Page:** 2

<div class="post-metadata">

**Author:** ![Tracey](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tracey/32/149153_2.png) [@Tracey](https://meta.discourse.org/u/Tracey)\
**Post date:** [August 11, 2019, 10:58am UTC](https://meta.discourse.org/t/malicious-personal-messages-followed-by-account-self-deletion/125158/26 "2019-08-11T10:58:49Z")

</div>

> [@tallship](#):
>
> would likely be in violation of the GDPR.

Possibly, which is quite ironic when the offender had no respect for the privacy of the person they were sending their **nasty** messages to in the first place! 🤦🏼‍♀️

---

<div class="post-metadata">

**Author:** ![tallship](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tallship/32/134211_2.png) [@tallship](https://meta.discourse.org/u/tallship)\
**Post date:** [August 11, 2019, 11:22am UTC](https://meta.discourse.org/t/malicious-personal-messages-followed-by-account-self-deletion/125158/27 "2019-08-11T11:22:45Z")

</div>

Yes that is indeed a problem with the GDPR, but it’s her data. Have you  
tried contacting your local law enforecement agency?

---

<div class="post-metadata">

**Author:** ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)\
**Post date:** [August 11, 2019, 12:37pm UTC](https://meta.discourse.org/t/malicious-personal-messages-followed-by-account-self-deletion/125158/28 "2019-08-11T12:37:52Z")

</div>

This is a common misconception, but no it likely wouldn’t be considered a breach of GDPR. The purpose of the processing is because they broke the rules of the community. GDPR doesn’t prevent site owners from investigating such incidents.

If they break the terms of the community or break laws you have every right to investigate.

---

<div class="post-metadata">

**Author:** ![gerhard](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/gerhard/32/119479_2.png) [@gerhard](https://meta.discourse.org/u/gerhard)\
**Post date:** [August 13, 2019, 9:00am UTC](https://meta.discourse.org/t/malicious-personal-messages-followed-by-account-self-deletion/125158/29 "2019-08-13T09:00:03Z")

</div>

We [fixed the problem](https://github.com/discourse/discourse/commit/e4f14ca3d79b0cc19a12348e330e2165a9364028) of PMs not counting toward the max 1 post limit for self-deletes. The fix was also backported to the stable and beta branches.

---

<div class="post-metadata">

**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\
**Post date:** [August 17, 2019, 8:37pm UTC](https://meta.discourse.org/t/malicious-personal-messages-followed-by-account-self-deletion/125158/32 "2019-08-17T20:37:16Z")

</div>



[Previous page](https://meta.discourse.org/t/malicious-personal-messages-followed-by-account-self-deletion/125158.md?page=1)