Automattic’s Marketing Lead, Nicholas Garofalo, has announced that WordPress is adding a new element to the Community Code of Conduct: Publishing private messages without consent. This addition expands the examples of unacceptable behaviors in the Community Code of Conduct to six.
He pointed out that “Sharing private communications without permission is a clear violation of professional integrity. This new addition ensures that private messages receive the same level of protection as personal information and that sensitive communications shared in confidence will not be disclosed without prior consent… This change encourages honest, constructive engagement across all levels of participation.”
He continued, “The strength of our community lies in the trust we place in one another. By clarifying and reinforcing our expectations, we are taking another step toward maintaining an inclusive, respectful, and safe environment for everyone.”
Code of Conduct is based on the Contributor Covenant, version 2.1 and now includes six examples of unacceptable behavior.
The use of sexualized language or imagery, and sexual attention or advances of any kind. Insulting or derogatory comments, taunting or baiting, and personal or political attacks. Public or private harassment. Publishing others’ private information, such as a physical or email address, without their explicit permission. Publishing private messages without consent. Other conduct which could reasonably be considered inappropriate in a professional setting.
The new addition takes effect immediately, with violations handled according to the existing enforcement guidelines. The sole exception is when private messages are shared to report concerns to the Incident Response Team.
Yoast-sponsored WordPress Core contributor Carolina Nymark shared her experience in X, “I am one of the people who’s private WP Slack messages have been screenshotted and made public. In my case it was a harmless joke that was shared, but it should go without saying that you don’t share