If a birdsite user doxxes someone in a tweet, the site has safe harbor. But when Elmo gives user information to third parties, such as journalists, no safe harbor applies.

As of today, the Privacy Policy dates back to June 2022 and states that user info will only be given to 3rd parties with that user's consent.

I'm monitoring the policy and seeding it into the Wayback machine so anyone with a cause of action has a record of if/when it changes.

https://twitter.com/en/privacy