I have a selling account, had it for 20 years, ..eBay now want Photo ID?

[j-r-hartley]

Had an selling account for 20 years (this isnt it) I'm a UK seller,  haven't sold a great deal, feedback is still under 1000,  last year after about a year of not using the account I started to sell again, not a lot but eBay first treated me like I hadn't been a member for 20 years and insisted on holding some of the sales (low value s/h items) until I confirmed my bank account (which i'd done a couple of years prior). they wanted to send me a certain amount and I was to confirm etc, they also restricted the value of the items I could sell so I had to ask them via live chat to up the limits or a car I was selling would not list etc, in the end after a few sales things seemed to correct themselves and I was paid straight away for items>

Roll on to may 2024, I've sold a few items over the months, in the last 2 weeks i've sold an item at £225 and one at £125, both collection only, both items have had no problems and i have a couple more items listed. Not electrical goods or high value items etc.  just normal stuff, some new and unused, most second hand and used etc

So today I logged on, I get a pop up stating they wanted me to ID myself, this would be in the form of a driving licence, passport or govt ID...and oh by the way any transactions are held until I comply?   

I don't sell high value / high risk items, I have 100% feedback,  I've had zero returns , my bank account is verified, they have my email address (verified with them some time ago, they send me emails re items listed or sold, email has notnot changed) they send me texts to my phone re delivery notices if i've bought something to collect, my physical address has not changed in all the time i've had the selling account.

and now they want the ID from me, no warning, no time schedule to complete but simply comply and until I do any funds are to be held over.

Furthermore, they want the ID but don't actually tell me where it will be stored, who will have access to it and such like all of which seems very wrong.

Anyone else had this?

[leighbayuk]

EEA - European Economic Area

ICO - Information Commissioner's Office

EU Standard Contract Clauses are exactly that. A set of standard contract clauses agreed by the EU and then adopted by the UK GDPR following Brexit.

[theelench]

Thanks for that, but which, if any of them are checking what multi-nationals are doing with my data and which ones will get it back and protected again if it is ever hacked?

As the posters in Lidl say "Once it's gone, it's gone"

If we're required by law to give multi-nationals all our personal data for 'security reasons' then those laws should give US a cast-iron guarantee that it WILL be held safely, that UK officials have a world-wide remit to ensure it is safe and the power to act against any company that doesn't adhere to those standards.

I really can't imagine our Data Commissioner going to California and demanding to see what ebay's systems are doing with our data, or even if they have our data and being welcomed with open arms and allowed free access.

So our Govt. complains to Washington.  Does anyone believe someone like Trump would be the slightest bit interested let alone helpful when it's US tech. giants that want the data in the first place.

Ebay certainly isn't getting my mug-shot or NINO. 

[leighbayuk]

AFAIK, you only have provide it if you want to sell (and be paid) on eBay.

Most data protection stuff is about have policies and procedures in place to hopefully prevent misuse or a breach. However, a lot of it is self-regulated/certified. The contractual part there is to impose penalties if it does go wrong. The hope being that these potentially large fines are enough of a threat to keep companies in line. The UK ICO or EU regulators would take action against the relevant regional office; e.g. €1.2 billion fine of Meta in 2023.

[4_bathrooms]

---

@theelench wrote:

If we're required by law to give multi-nationals all our personal data for 'security reasons' then those laws should give US a cast-iron guarantee that it WILL be held safely, that UK officials have a world-wide remit to ensure it is safe and the power to act against any company that doesn't adhere to those standards.

---

I'm afraid if you don't want to your personal information being handled or processed by a multinational corporation at any point you're going to have to live off-grid without having so much as a bank account. During the recent Amazon Web Services outage several British banks suffered outages to their online banking services. This shouldn't really have happened as the outage affected AWS servers that are physically located in Northern Virginia meaning any affected services were at least relying on DNS from that cluster. Virtually all businesses with an online presence use cloud computing services to some degree whether they are aware of it or not - the Government has even had a "Cloud First" policy since 2013.

[4_bathrooms]

---

@leighbayuk wrote:

The UK ICO or EU regulators would take action against the relevant regional office; e.g. €1.2 billion fine of Meta in 2023.

---

Although the regional office is the party being prosecuted it's probably worth pointing out that maximum fines are based on a fixed maximum penalty or the organisation's global annual turnover; whichever is higher. This is why Meta, Facebook et al have been fined so much (but still haven't paid a penny/cent due to appeals being lodged). 

[lilwat_91]

First they wanted your NINO, then they wanted your photo.....next they want your blood and urine samples.

Strange how they don't want all this info from the thousands of chy-na sellers

[c_of_e84]

The chinese are party members, you can tell because they have internet access, the state run evening schools on how to sell on ebay and you get social credit for selling.