Is a copy or photo of my ID required to verify who I am on social media?

Social media sometimes need to verify who you are. For example, if you want a 'tick' on your profile to show that your profile is trustworthy. Or if your account is blocked and you want to regain access. This verification is necessary because social media are obliged to properly protect your personal data. And to prevent the wrong person from gaining access to your account and data.

When copy ID?

Demanding a photo or copy of your ID is only permitted:

• If the company behind the social media has reason to doubt that you are who you say you are. For example, in the event of suspicious activity on your account; and
• If there really is no other way to verify who you are.

In general, you can assume that:

• If you want to regain access to a blocked account, social media will verify who you are. This way, they prevent the wrong person from accessing your account. But a photo or copy of your ID probably isn't the only way to verify that you own the account. You can ask the company to give you another option.
• Is your account blocked and you just want to delete it? In that case, a photo or copy of your ID is in principle not necessary. Because there is probably only a limited risk that the wrong person would gain access to your data. After all, it's not about access, it's only about deletion.
• Is a photo or copy of your ID really necessary, and does the company explain why? We do advise you to cover your citizen service number. And also other information that the company doesn't need. Your name and possibly your photo are usually enough to verify who you are.

This is what you can do

Are social media asking you to upload a photo or copy of your ID? And do you doubt whether that is really necessary? In that case, please first contact (the DPO of) the company behind the social media. You will usually find the contact details in the company's privacy statement.

Are you unable to work it out together? In that case, you can submit a complaint to the Autoriteit Persoonsgegevens (AP). If the company does not have a head office in the Netherlands, the AP will forward your complaint to the supervisory authority of the country where the head office is located. They will handle your complaint. This may mean that it takes longer for your complaint to be processed. The AP will keep you informed about progress.