Shared, Transferred & Organisational Accounts
Personal accounts must not be shared, sold, transferred, rented, or used as a communal identity. If multiple people operate an authorised organisational account or integration, its ownership and responsible operators must be disclosed to staff.
The account owner is responsible for controlling access, removing former operators, rotating compromised credentials, and ensuring that every operator follows these rules. “Someone else had access” does not make harmful activity disappear.
Do not purchase aged accounts, use account marketplaces, or transfer an account to bypass history, eligibility, verification, or discipline. Staff may restrict an account when its operator cannot be reliably identified.
Households may use separate personal accounts. Sharing a network or device is not itself misconduct, but members must not deliberately blur account ownership to obstruct a safety investigation.