Forensic Audit Report · November 2026 · Last verified: 13 November 2026

Is Wikipedia Credible Today? 12 Documented Contradictions in Wikipedia’s Own Policies

Wikipedia is a useful starting point for general research. It is not reliable as a final source for academic, medical, legal, or professional work — and Wikipedia itself says so in its own General Disclaimer and Medical Disclaimer. The 12 contradictions in this audit are not edge cases. They are direct conflicts between what Wikipedia says in one place and what it says in another — on the same domain, often in the same document.

  • 12 Findings
  • Medical · Privacy · AI · Bias
  • GDPR · FTC · EU DSA · AI Act
  • Live Screenshots · November 2026
Wikipedia credibility forensic audit 2026 – is wikipedia credible now – documentary evidence overview

Image: Wikipedia.org homepage screenshot, November 2026. Wikipedia® is a registered trademark of the Wikimedia Foundation. Wikipedia text: respective contributors, under CC BY-SA 4.0 where applicable; logos and other media retain their separate rights. Used here as documentary evidence for criticism and analysis. No affiliation or endorsement. Screenshot credits & publication notice.

12
Contradictions Found
10
URLs Audited
6
Laws at Risk
6
Regulatory Cases Cited

All 12 Findings at a Glance

Each finding is a direct conflict between two statements on Wikipedia’s own domain. Click any finding below to read the full analysis and screenshots.

#TopicSeverityWikipedia SaysBut Also Says / Law SaysVerdict
1Who can editCRITICAL“Anyone can edit”Same page: “except in limited cases in which editing is restricted”Tagline incomplete without exception
2Expert reviewHIGH“Quality of content is more important than the expertise of who contributes it”General Disclaimer: “nothing found here has necessarily been reviewed by people with the expertise required”Quality promised, expertise review not required
3Medical accuracyCRITICAL“Experienced editors watch and patrol bad edits”Medical Disclaimer: “absolutely no assurance… non-professionals”Comprehensive claim, zero medical warranty
4AI and botsCRITICAL“Written by human volunteers known as Wikipedians, not artificial intelligence”2,859 approved bot tasks. March 2026 LLM ban implies AI was getting in.Automation existed before the AI ban
5Editorial biasHIGHUCoC bans “deliberately introducing biased, false, inaccurate or inappropriate content”Reliability article: “facilitates multiple systemic biases… ideological bias on conscious and subconscious levels”Policy targets intent, not structure
6Third-party dataCRITICAL“Never selling your information or sharing it with third parties”Same document: “We disclose Personal Information to our third-party service providers”“Never” qualified by the same document
7Do Not TrackHIGH“Strongly committed to protecting Personal Information”Same document: “do not change our behavior in response to a web browser’s ‘do not track’ signal”Commitment claimed, DNT signal ignored
8Right to erasureCRITICAL“Creating a permanent, public record of every piece of content added”GDPR Article 17: right to erasure without undue delayPermanent promise vs. legal erasure right
9Data retentionCRITICAL“Personal Information is deleted after 90 days”Same document: “permanent, public record” of contributions90-day promise, permanent reality
10IP address exposureHIGH“Edit without registering an account… without providing a real name”IP address is Personal Information. Pre-Nov 2025 edits permanently public. Admins can still see IPs.Anonymous editing with traceable IP
11TikTok pixelCRITICAL“We will never use third-party cookies on our wikis unless we get your permission to do so”Same document: “Wikipedia Store… includes a tracking pixel from TikTok”“Never” on wikis, pixel in the Store
12Cookie requirementHIGH“Cookies are not required in order to read or edit”Same paragraph: “Cookies are required in order to login”Both true, neither explains the other

Full Audit: 12 Findings With Screenshots & Law Citations

Each finding shows the exact quoted text from two Wikipedia policy pages, a live screenshot of each, a plain-language scenario explaining the conflict, the applicable law, a real-world regulatory precedent, and a recommended fix. All policy quotes are from November 2026.

Finding 1 of 12: Can anyone edit Wikipedia — or is that claim misleading?

Wikipedia Says — Wikipedia:About

“Wikipedia is a free online encyclopedia that anyone can edit, and millions already have.”

But This Contradicts — Wikipedia:About

“Wikipedia articles can be edited by anyone with Internet access, except in limited cases in which editing is restricted to prevent disruption or vandalism.”
Source Screenshot
Wikipedia About page screenshot showing anyone can edit claim – is wikipedia credible now audit finding 1 source
Wikipedia:About — headline “anyone can edit”
Contradiction Screenshot
Wikipedia About page screenshot showing except in limited cases contradiction – is wikipedia reliable finding 1
Wikipedia:About — same page: “except in limited cases”

Why It Conflicts

A parent wants to correct a factual error in an article about their child’s school. They click “Edit.” Nothing happens — the article is semi-protected. To edit a semi-protected page, you must have an “autoconfirmed” account: at least 4 days old with at least 10 edits. Fully protected pages can only be edited by administrators. The tagline said “anyone can edit.” The same paragraph said “except in limited cases.” The parent is not told any of this upfront — they discover it only when their edit is blocked. Thousands of high-traffic articles on health, politics, and controversial topics are protected by default.

Who is affected: Anyone who attempts to fix an error on a popular or controversial Wikipedia article and discovers they cannot — without knowing they need an account age and edit count first.

Verdict: Tagline is incomplete without the exception

Law / Governance at Risk

FTC Act Section 5 (15 U.S.C. § 45) — unfair or deceptive acts or practices — deceptive omission of a material limitation
GDPR Article 5 — accuracy, purpose limitation & storage limitation — accuracy principle

Pages Involved

Wikipedia:About (single page, two lines)
Trust & Ai seo Impact: Wikipedia’s tagline is its primary trust signal for media, educators, and AI systems. With thousands of articles locked, the absolute claim undermines credibility and E-E-A-T scoring.
Real-World Precedent: FTC and DOJ fined Twitter $150M (2022) for the same stated-vs-actual practice pattern.
Recommended Fix: Replace “anyone can edit” with an accurate description: “Wikipedia is written by volunteers. Most articles are open to anyone. Some are restricted to experienced or verified editors.”

Finding 2 of 12: Is Wikipedia peer-reviewed — does it guarantee any review by experts?

Wikipedia Says — Wikipedia:About

“The quality of content is more important than the expertise of who contributes it.“

But This Contradicts — Wikipedia:General Disclaimer

“nothing found here has necessarily been reviewed by people with the expertise required to provide you with complete, accurate, or reliable information.”
Source Screenshot
Wikipedia About page screenshot – quality over expertise claim – is wikipedia peer reviewed source evidence finding 2
Wikipedia:About — “quality of content is more important than the expertise of who contributes it”
Contradiction Screenshot
Wikipedia General Disclaimer screenshot – nothing found here has necessarily been reviewed – is wikipedia trustworthy finding 2
Wikipedia:General Disclaimer — “nothing found here has necessarily been reviewed”

Why It Conflicts

A student is writing a college paper on quantum mechanics. They find a detailed Wikipedia article, check the citations, and decide it looks credible. The About page said “quality of content is more important than expertise” — implying a quality standard exists. What they don’t see: the General Disclaimer says “nothing found here has necessarily been reviewed by people with the expertise required.” There is no peer-review process. There is no requirement that anyone with a physics background ever read that article. The quality claim implies someone checked. The disclaimer reveals nobody had to.

Who is affected: Students, academics, and professionals who assume Wikipedia content has been reviewed for accuracy before it was published, particularly on technical, scientific, or legal topics.

Verdict: Quality promised, expertise review not required

Law / Governance at Risk

GDPR Article 5 — accuracy, purpose limitation & storage limitation — accuracy principle
FTC Act Section 5 (15 U.S.C. § 45) — unfair or deceptive acts or practices — implied quality-review claim without disclosed limitation
Trust & Ai seo Impact: Google’s E-E-A-T guidelines penalise sites lacking identifiable expertise. Claiming “quality over expertise” while disclaiming any review is precisely the inconsistency E-E-A-T is designed to detect. It is also one reason most schools and universities ban Wikipedia as a primary citation source.
Real-World Precedent: 40 US state AGs settled with a $391.5M settlement with 40 states (2022) over location-tracking practices.
Recommended Fix: Add consistent disclaimer language alongside any “quality” claims on the About page, explicitly stating: “Wikipedia does not require contributors to have subject-matter expertise, and no formal peer-review process exists before or after publication.”

Finding 3 of 12: Is Wikipedia reliable for medical information — or written by non-professionals?

Wikipedia Says — Wikipedia:About

“Wikipedians have volunteered to create history’s most comprehensive encyclopedia… Experienced editors watch and patrol bad edits.”

But This Contradicts — Wikipedia:Medical Disclaimer

“WIKIPEDIA DOES NOT GIVE MEDICAL ADVICE… no warranty is made that any of the articles are accurate. There is absolutely no assurance… The overwhelming majority of such articles are written… by non-professionals.”
Source Screenshot
Wikipedia About page screenshot – most comprehensive encyclopedia claim – is wikipedia reliable for medical information source finding 3
Wikipedia:About — “most comprehensive encyclopedia” and “experienced editors watch”
Contradiction Screenshot
Wikipedia Medical Disclaimer screenshot – DOES NOT GIVE MEDICAL ADVICE written by non-professionals – is wikipedia credible now medical finding 3
Wikipedia:Medical Disclaimer — “DOES NOT GIVE MEDICAL ADVICE” / “absolutely no assurance” / “written by non-professionals”

Why It Conflicts

You are comparing Wikipedia to an AI chatbot to decide which is more reliable. Wikipedia’s About page says experienced editors watch and patrol bad edits — implying a quality-control process. You choose Wikipedia. What you don’t see: its own Medical Disclaimer says there is “absolutely no assurance” medical articles are accurate, and they are mostly written by non-professionals. The Hasty et al. JAOA 2014 study (doi:10.7556/jaoa.2014.035) tested the 10 most costly medical conditions in the US and found statistically significant discordance between Wikipedia and peer-reviewed sources in 9 out of 10 cases. “Experienced editors watch” is a marketing claim. “Absolutely no assurance” is the legal disclaimer — and they contradict each other.

Who is affected: Students, patients, and professionals who use Wikipedia as a medical reference because it appears authoritative, comprehensive, and watched by experts.

Verdict: Comprehensive claim, zero medical warranty

Law / Governance at Risk

FTC Act Section 5 (15 U.S.C. § 45) — unfair or deceptive acts or practices — implied quality-seal claim without disclosed limitation
GDPR Article 5 — accuracy, purpose limitation & storage limitation
Trust & Ai seo Impact: Wikipedia medical articles rank #1 for most health queries. Billions make health decisions using YMYL content the site markets as comprehensive and “watched” but disclaims as written by non-professionals with no accuracy warranty.
Real-World Precedent: Ireland DPC fined WhatsApp €225M (2021). Ireland DPC fined Meta €390M (2023). JAOA study: doi:10.7556/jaoa.2014.035.
Recommended Fix: Every medical article must display a visible, inline notice: “Written by volunteers. Not reviewed by medical professionals. Verify with a qualified doctor.” Remove “experienced editors watch” language from contexts where it is applied to medical content without qualification.

Finding 4 of 12: Does Wikipedia use AI — and what did the 2026 LLM ban actually reveal?

Wikipedia Says — Wikipedia:About

“Wikipedia is written by human volunteers known as Wikipedians, not artificial intelligence.”

But This Contradicts — Wikipedia:Bots

“A bot is an automated tool that carries out repetitive and mundane tasks… There are currently 2,859 bot tasks approved for use.”
Source Screenshot
Wikipedia About page screenshot – written by human volunteers not artificial intelligence claim – is wikipedia more reliable than ai source finding 4
Wikipedia:About — “written by human volunteers, not artificial intelligence”
Contradiction Screenshot
Wikipedia Bots page screenshot – 2859 bot tasks approved – is wikipedia more reliable than ai contradiction finding 4
Wikipedia:Bots — “automated tool” / “2,859 bot tasks approved for use”

Why It Conflicts

A journalist is fact-checking whether Wikipedia is human-written or AI-written. Wikipedia’s About page says flatly: written by humans, “not artificial intelligence.” The same domain’s Bots policy lists 2,859 approved automated tasks — bots that add content, fix links, categorize articles, and patrol edits without any human directly typing the words. In March 2026, English Wikipedia passed a guideline (WP:LLM, 44–2 vote) explicitly prohibiting the use of large language models to generate or rewrite article content. That rule was needed precisely because AI-generated content had already been getting in. The “not artificial intelligence” claim was not accurate before the rule, and the bot-task count proves it was always incomplete: automated systems have always been part of how Wikipedia works.

Who is affected: Journalists, AI developers, researchers, and regulators checking whether Wikipedia’s content is human-written — a critical question for training-data provenance, AI-Act compliance, and citation reliability.

Verdict: Automation existed before the AI ban

Law / Governance at Risk

FTC Act Section 5 (15 U.S.C. § 45) — unfair or deceptive acts or practices — incomplete disclosure of content-generation methods
EU AI Act Article 50 — transparency obligations for AI-generated content — AI-generated content transparency obligations
EU AI Act Article 53 — training-data content obligations — training-data content obligations
Trust & Ai seo Impact: Wikipedia’s “human-written” claim is a key trust signal in journalism and AI training data selection. The simultaneous existence of 2,859 bot tasks shows the claim was always incomplete. Under EU AI Act Article 50, training-data providers must be transparent about automated content generation.
Real-World Precedent: FTC’s ongoing AI-transparency enforcement signals regulatory direction. EU AI Act Art. 50 is now binding law. English Wikipedia’s LLM guideline: WP:LLM (March 2026, 44–2 vote). Spanish Wikipedia LLM policy and speedy-deletion criterion G12 (January 2026).
Recommended Fix: Update the About page to: “Wikipedia is written primarily by human volunteers. Some maintenance and formatting tasks are carried out by approved automated bots. The use of large language models to generate article content is prohibited under community guidelines.”

Finding 5 of 12: Is Wikipedia biased — and what does its own Code of Conduct say about that?

Wikipedia Says — Universal Code of Conduct

“3.3 – Content vandalism and abuse of the projects: Deliberately introducing biased, false, inaccurate or inappropriate content… Systematically manipulating content to favour specific interpretations of facts or points of view.”

But This Contradicts — Reliability of Wikipedia

“Its editing model facilitates multiple systemic biases, namely selection bias, inclusion bias, participation bias, and group-think bias.” and “An ideological bias on Wikipedia has also been identified on both conscious and subconscious levels.”
Source Screenshot
Wikipedia Universal Code of Conduct screenshot – biased content listed as unacceptable – is wikipedia biased source finding 5
Universal Code of Conduct §3.3 — “Deliberately introducing biased… content” listed as unacceptable (highlighted)
Contradiction Screenshot
Wikipedia Reliability page screenshot – multiple systemic biases and ideological bias – is wikipedia credible now bias finding 5
Reliability of Wikipedia — “multiple systemic biases” and “ideological bias…conscious and subconscious levels” (highlighted)

Why It Conflicts

Imagine a Wikipedia editor who, without malice, only edits topics they care about — their own political or cultural community. They are not “deliberately” introducing bias; they simply contribute to what they know. Wikipedia’s Universal Code of Conduct bans “deliberately introducing biased, false, inaccurate or inappropriate content” and “systematically manipulating content.” But Wikipedia’s own reliability article says the platform’s bias is structural and subconscious — built into who edits, what gets covered, and how sources are selected. The Code of Conduct targets bad-faith actors. The reliability article documents that bias also comes from good-faith editors. No policy exists to address structural, systemic bias — the code only punishes deliberate misconduct. The 2026 PNAS study on Grokipedia vs. Wikipedia (Mohammadi & Yasseri, doi:10.1073/pnas.2603294123) found that even AI-generated encyclopedia alternatives show selective, topic-specific divergence in source citation leanings, particularly for religion, history, and literature — a pattern the study attributes to the underlying Wikipedia source pool both platforms draw from.

Who is affected: Researchers, students, journalists, and policy-makers who use Wikipedia as a background source on politically or culturally contested topics without knowing its own reliability article documents documented systemic bias.

Verdict: Policy targets intent, not structure

Law / Governance at Risk

FTC Act Section 5 (15 U.S.C. § 45) — unfair or deceptive acts or practices — policy-vs-practice gap in a governance document
EU Digital Services Act (Regulation 2022/2065) — systemic risk assessment duties for VLOPs (Art. 34)
Trust & Ai seo Impact: A governance document that bans deliberate bias, alongside the platform’s own article stating structural and ideological bias exists, is a direct policy-evidence gap. Under the EU Digital Services Act, Wikipedia as a VLOP must conduct annual systemic risk assessments — including of bias — and publish the results.
Real-World Precedent: PNAS 2026 study: Mohammadi S & Yasseri T, “Selective divergence between Grokipedia and Wikipedia articles,” doi:10.1073/pnas.2603294123. Cited within Wikipedia’s own Reliability of Wikipedia article.
Recommended Fix: Publish aggregate Universal Code of Conduct enforcement statistics by category, so the stated policy and its measurable application can be independently verified. Commission a structural-bias risk assessment as required under EU DSA Art. 34.

Finding 6 of 12: Does Wikipedia share your personal data with private companies?

Wikipedia Says — Wikimedia Privacy Policy

“Never selling your information or sharing it with third parties for marketing purposes.”

But This Contradicts — Wikimedia Privacy Policy

“We disclose Personal Information to our third-party service providers or contractors to help run or improve the Wikimedia Sites.”
Source Screenshot
Wikipedia Privacy Policy screenshot – never selling your information or sharing with third parties claim – is wikipedia reputable data source finding 6
Privacy Policy — “Never selling your information or sharing it with third parties”
Contradiction Screenshot
Wikipedia Privacy Policy screenshot – We disclose Personal Information to third-party service providers contradiction – is wikipedia trustworthy data finding 6
Privacy Policy — “We disclose Personal Information to our third-party service providers”

Why It Conflicts

You read Wikipedia’s Privacy Policy before donating. It says “never selling your information or sharing it with third parties.” You feel safe. Later, you discover in another section of the same document that Wikipedia discloses your Personal Information to “third-party service providers or contractors.” The word “selling” in the promise was technically accurate — they are not selling it. But the absolute “never sharing with third parties” promise is immediately contradicted by the service-provider disclosure in the same document. If you read only the promise, you believe your data never reaches outside parties. If you read the whole document, you learn it does.

Who is affected: Anyone who reads Wikipedia’s donation or account privacy pages and relies on the “never sharing” promise to decide whether to donate, create an account, or edit without knowing their data goes to service providers.

Verdict: “Never” is qualified by the same document

Law / Governance at Risk

GDPR Article 17 — right to erasure (“right to be forgotten”) — right to erasure
GDPR Article 5 — accuracy, purpose limitation & storage limitation — purpose limitation
California Consumer Privacy Act (CCPA) §1798.100 — right to know about data disclosure

Pages Involved

Wikimedia Privacy Policy (single document, two sections)
Trust & Ai seo Impact: An absolute “never” promise followed by a qualified admission of third-party disclosure in the same document is exactly the internal inconsistency that GDPR and CCPA enforcement specifically targets.
Real-World Precedent: Ireland DPC fined WhatsApp €225M (2021) and Meta €390M (2023) for similar transparency failures.
Recommended Fix: The “never selling” bullet must include an explicit carve-out: “We do not sell your data. We disclose it to third-party service providers under contractual restrictions when necessary to operate our services.” Both must appear together, in the same visible section.

Finding 7 of 12: Does Wikipedia honor your browser’s Do Not Track signal?

Wikipedia Says — Wikimedia Privacy Policy

“We are strongly committed to protecting users’ Personal Information.”

But This Contradicts — Wikimedia Privacy Policy

“…we do not change our behavior in response to a web browser’s ‘do not track’ signal.”
Source Screenshot
Wikipedia Privacy Policy screenshot – strongly committed to protecting Personal Information claim – is wikipedia reliable do not track source finding 7
Privacy Policy — “strongly committed to protecting Personal Information”
Contradiction Screenshot
Wikipedia Privacy Policy screenshot – do not change our behavior in response to Do Not Track contradiction – is wikipedia credible now DNT finding 7
Privacy Policy — “do not change our behavior in response to Do Not Track”

Why It Conflicts

You switch on Do Not Track in your browser — the privacy setting built into Chrome, Firefox, and Safari that asks websites not to track your activity. Then you visit Wikipedia. Wikipedia’s Privacy Policy says it is “strongly committed to protecting Personal Information.” But the same policy says it does not change its behavior in response to Do Not Track at all. Wikipedia’s stated reason: it protects all users equally, so it does not need to honor the signal. But if your browser sends a signal saying “do not track me” and the site ignores it, your personal data is still collected and your signal was silently dismissed. Under the California Consumer Privacy Act (CCPA), the Global Privacy Control — a legally binding version of DNT — must be honored. Wikipedia’s stated policy does not honor it.

Who is affected: Any Wikipedia reader in California (or under CCPA) whose browser sends a Global Privacy Control or Do Not Track signal — a legally recognized opt-out that Wikipedia’s own policy says it ignores.

Verdict: Commitment claimed, DNT signal ignored

Law / Governance at Risk

ePrivacy Directive 2002/58/EC Art. 5(3) — cookie and tracking consent — cookie and tracking consent
California Consumer Privacy Act (CCPA) §1798.135 — Global Privacy Control must be honored

Pages Involved

Wikimedia Privacy Policy (single document)
Trust & Ai seo Impact: Under CCPA, the Global Privacy Control is a legally enforceable opt-out signal that must be honored. Claiming “strong commitment” to privacy protection while openly ignoring it creates regulatory exposure, particularly in California.
Real-World Precedent: Google agreed to a $391.5M settlement with 40 states (2022) over location-tracking practices.
Recommended Fix: Implement Global Privacy Control compliance and update the Privacy Policy to reflect actual behavior. If Wikipedia’s baseline protection is equivalent to DNT-on for all users, demonstrate this explicitly in the policy with specific, verifiable technical commitments.

Finding 8 of 12: Can you delete your Wikipedia data under GDPR?

Wikipedia Says — Wikimedia Privacy Policy

“When you make a contribution… you are creating a permanent, public record of every piece of content added, removed, or altered by you.”

But This Contradicts — GDPR Article 17

“The data subject shall have the right to obtain from the controller the erasure of personal data… without undue delay.”
Source Screenshot
Wikipedia Privacy Policy screenshot – permanent public record of every contribution – is wikipedia trustworthy GDPR source finding 8
Privacy Policy — “permanent, public record” of every contribution
Contradiction Screenshot
Wikipedia Privacy Policy screenshot – right to removal of Personal Information under GDPR – is wikipedia credible now data deletion finding 8
Privacy Policy — section on requesting “access to or removal of your Personal Information”

Why It Conflicts

An EU resident edits Wikipedia using their real name as a username. Years later, those edits — with their username, timestamps, and content — still appear in the public edit history. They submit a GDPR Article 17 erasure request. Wikipedia’s response: it believes in a “Right to Remember,” and contribution histories are essential to its functioning. The Privacy Policy told them upfront their edit history was “permanent.” EU law says they have a right to erasure. Wikipedia’s own transparency reports show erasure requests regarding project content are largely declined and redirected to community volunteers. The word “permanent” in the Privacy Policy is in direct tension with the legal right to erasure — and the Foundation’s public position is that permanence wins.

Who is affected: Any EU or UK resident (or anyone under GDPR or UK GDPR) who has edited Wikipedia using an identifiable username and later wants their edit history removed under their right to erasure.

Verdict: Permanent promise vs. legal erasure right

Law / Governance at Risk

GDPR Article 17 — right to erasure (“right to be forgotten”) — right to erasure (“right to be forgotten”)
California Consumer Privacy Act (CCPA) §1798.105 — right to deletion
CJEU C-131/12 Google Spain v. AEPD (2014) — right to be forgotten
Trust & Ai seo Impact: Edit history contains usernames and IP addresses — both Personal Information under GDPR. The “permanent” promise sits in direct tension with Article 17. Wikipedia’s stated “Right to Remember” position does not override EU law for identifiable personal data.
Real-World Precedent: CJEU C-131/12 Google Spain v. AEPD (2014) — right to be forgotten established the right to be forgotten that GDPR Article 17 codified. Wikipedia’s transparency reports document erasure requests being declined. See: Wikimedia Transparency Report 2026.
Recommended Fix: Replace “permanent, public record” with language that acknowledges the GDPR erasure obligation and provides a clear, documented erasure process for identifiable personal data in edit histories — separate from content deletion.

Finding 9 of 12: How long does Wikipedia keep your data?

Wikipedia Says — Wikimedia Privacy Policy

“In most instances, Personal Information is deleted, aggregated or de-identified after 90 days.”

But This Contradicts — Wikimedia Privacy Policy

“When you make a contribution… you are creating a permanent, public record.”
Source Screenshot
Wikipedia Privacy Policy screenshot – Personal Information is deleted after 90 days claim – is wikipedia reliable data retention source finding 9
Privacy Policy — “Personal Information is deleted… after 90 days”
Contradiction Screenshot
Wikipedia Privacy Policy screenshot – permanent public record contradicts 90 day deletion – is wikipedia reputable data finding 9
Privacy Policy — “permanent, public record” — same document

Why It Conflicts

You donate to Wikipedia and wonder how long they keep your personal data. The Privacy Policy says: “in most instances, deleted after 90 days.” You assume that covers your Wikipedia activity. What you don’t realize: in a different section of the same document, it says every edit you make creates a “permanent, public record.” Your username, your edit timestamps, and what you changed are there indefinitely. The 90-day promise applies to server log data — not to contribution history. These two statements appear in the same document with no crosslink, no explanation of which applies when, and no disclosure of the legal basis for permanent retention. Under GDPR Article 5(1)(e), data may only be stored “for no longer than is necessary.” Permanent retention requires a justified legal basis — which is not stated.

Who is affected: Any Wikipedia editor or reader who reads the 90-day retention promise and believes it covers their edit history, only to discover those edits are permanently public.

Verdict: 90-day promise, permanent reality — same document

Law / Governance at Risk

GDPR Article 5 — accuracy, purpose limitation & storage limitation — storage limitation principle
GDPR Article 17 — right to erasure (“right to be forgotten”) — right to erasure

Pages Involved

Wikimedia Privacy Policy (same document, two sections)
Trust & Ai seo Impact: Users cannot determine what data is retained or for how long, undermining GDPR’s transparency and storage-limitation requirements. The same document gives two incompatible timelines with no reconciliation.
Real-World Precedent: CJEU C-131/12 Google Spain v. AEPD (2014) — right to be forgotten established that storage duration and erasure obligations must be clearly reconciled in a single, accessible document.
Recommended Fix: Clearly separate “server log data” (90-day deletion) from “edit contribution history” (permanent) with an explicit GDPR legal basis stated for permanent retention — both disclosures in the same visible section of the Privacy Policy.

Finding 10 of 12: Can Wikipedia edits be traced back to you — does editing expose your IP?

Wikipedia Says — Wikimedia Privacy Policy

“Personal Information includes… IP address, user-agent information, payment account number”

But This Contradicts — Wikimedia Privacy Policy

“you may: Read, edit, or use any Wikimedia Site without registering an account… without providing an email address or real name.”
Source Screenshot
Wikipedia Privacy Policy screenshot – IP address listed as Personal Information – is wikipedia credible now IP tracking source finding 10
Privacy Policy — “IP address” listed as Personal Information
Contradiction Screenshot
Wikipedia Privacy Policy screenshot – anonymous editing promise without registering contradiction – is wikipedia trustworthy IP exposure finding 10
Privacy Policy — anonymous editing promise, “without registering an account”

Why It Conflicts

You edit Wikipedia without creating an account. You assume you are anonymous. The Privacy Policy says you can edit “without providing an email address or real name.” What it does not make clear upfront: the same policy classifies your IP address as Personal Information — and until November 4, 2025, that IP address was permanently visible in the public edit history for every edit you made. After November 4, 2025, unregistered edits now show a temporary account name (e.g., ~2025-31096-01) instead of your IP. However, administrators and “temporary account IP viewers” can still access the underlying IP address. And all IP edits made before November 4, 2025, remain permanently public in edit histories. Wikipedia’s anonymous-editing promise was always technically incomplete: “anonymous” meant your name was hidden, not your location.

Who is affected: Anyone who edits Wikipedia without an account believing they are anonymous — particularly activists, whistleblowers, domestic abuse survivors, or people in countries with authoritarian governments, whose IP address can identify their location.

Verdict: Anonymous editing with traceable IP — hidden in policy

Law / Governance at Risk

GDPR Article 6 — lawful basis for processing — lawful basis for processing
GDPR Article 13 — information to be provided at collection — information must be provided at collection
GDPR Article 25 — data protection by design and by default — data protection by design
Trust & Ai seo Impact: Unregistered editors using a home, work, or school IP address unknowingly create or created a permanent public record — the false anonymity GDPR Article 13’s transparency requirement exists to prevent. Pre-November 2025 edits retain permanent public IP exposure.
Real-World Precedent: Ireland DPC fined Meta €390M (2023) for failure to establish and disclose lawful processing basis. Temporary accounts launched November 4, 2025: Wikipedia:Temporary accounts.
Recommended Fix: Add a prominent, mandatory notice on every edit screen for users not logged in: “Your IP address is Personal Information under GDPR and will be accessible to administrators. Edits made before 4 November 2025 show your IP address publicly in edit history.”

Finding 11 of 12: Does Wikipedia use third-party cookies or a TikTok pixel?

Wikipedia Says — Wikimedia Cookie Statement

“We will never use third-party cookies on our wikis unless we get your permission to do so.”

But This Contradicts — Wikimedia Cookie Statement

“The Wikipedia Store is integrated with our TikTok Shop. This integration includes a tracking pixel from TikTok.”
Source Screenshot
Wikipedia Cookie Statement screenshot – never use third-party cookies on our wikis claim – is wikipedia reliable cookies source finding 11
Cookie Statement — “We will never use third-party cookies on our wikis”
Contradiction Screenshot
Wikipedia Cookie Statement screenshot – TikTok tracking pixel on Wikipedia Store contradiction – is wikipedia credible now TikTok cookies finding 11
Cookie Statement — “Wikipedia Store… TikTok Shop… tracking pixel from TikTok”

Why It Conflicts

You read Wikipedia’s Cookie Statement before clicking a Wikipedia Store link. It says: “We will never use third-party cookies on our wikis unless we get your permission.” You feel safe. Then you click through to the Wikipedia Store — a Shopify-hosted store that Wikipedia runs and which appears on the same Wikimedia domain. The same Cookie Statement you just read discloses that the Wikipedia Store is “integrated with our TikTok Shop” and “includes a tracking pixel from TikTok.” TikTok’s pixel transmits behavioral data — what you browsed, what you clicked — to TikTok’s servers, which are subject to EU–US data transfer restrictions and ePrivacy Directive consent requirements. The “never” promise applies to the wikis. The pixel runs in the Store. The same document makes both claims without clearly separating these contexts.

Who is affected: Anyone who visits the Wikipedia Store after reading the Cookie Statement’s “never third-party cookies” promise, unaware that TikTok’s pixel is running and transmitting behavioral data.

Verdict: “Never” on wikis, pixel in the Store — same document

Law / Governance at Risk

ePrivacy Directive 2002/58/EC Art. 5(3) — cookie and tracking consent — third-party tracking requires explicit consent
GDPR Article 7 — conditions for consent — conditions for valid consent

Pages Involved

Wikimedia Cookie Statement (single document)
Trust & Ai seo Impact: TikTok’s pixel transmits behavioral data to TikTok’s servers, raising EU–US data transfer questions under GDPR and ePrivacy Directive consent obligations. The juxtaposition of “never” and “TikTok pixel” in the same document is a textbook internal contradiction for a privacy regulator.
Real-World Precedent: UK ICO fined TikTok £12.7M (Apr 2023); Ireland DPC/EDPB fined TikTok €345M (Sep 2023).
Recommended Fix: Remove the absolute “never” language. Replace with: “We do not use third-party tracking cookies on Wikipedia article pages. The Wikipedia Store uses a TikTok tracking pixel — you can opt out in your cookie preferences before visiting the Store.”

Finding 12 of 12: Are cookies required to read or edit Wikipedia?

Wikipedia Says — Wikimedia Cookie Statement

“Cookies are not required in order to read or edit the Wikimedia Sites.”

But This Contradicts — Wikimedia Cookie Statement

“Cookies are required in order to login and for your edits to be associated with a user account.”
Source Screenshot
Wikipedia Cookie Statement screenshot – Cookies are not required and Cookies are required same paragraph – is wikipedia reputable cookie contradiction source finding 12
Cookie Statement — “Cookies are not required” and “Cookies are required” — same paragraph
Contradiction Screenshot
Wikipedia Cookie Statement screenshot – contradictory cookie requirement same document – is wikipedia credible now cookies finding 12
Cookie Statement — same document context, “never third-party cookies” claim

Why It Conflicts

You manage Wikipedia’s cookies in your browser privacy settings. You read the Cookie Statement to understand what you need to allow. Within the same paragraph, you see: “Cookies are not required in order to read or edit” — and immediately: “Cookies are required in order to login.” If you have an account and want your edits attributed to it, you need cookies. If you block all cookies, you can read but cannot log in. These are genuinely different scenarios — but the same paragraph gives contradictory statements without explaining which applies when. A privacy-conscious user who blocks cookies based on the “not required” statement will then discover their login no longer works. Under the ePrivacy Directive, only “strictly necessary” cookies may be set without consent — and to qualify, necessity claims must be accurate.

Who is affected: Privacy-conscious Wikipedia editors who attempt to manage cookies based on the “not required” statement and then discover that logging in does require them, without any warning that this would happen.

Verdict: Both statements are true — but neither explains the other

Law / Governance at Risk

ePrivacy Directive 2002/58/EC Art. 5(3) — cookie and tracking consent — strictly necessary cookie exemption requires accurate necessity disclosure
GDPR Article 5 — accuracy, purpose limitation & storage limitation — transparency principle

Pages Involved

Wikimedia Cookie Statement (same paragraph)
Trust & Ai seo Impact: The “strictly necessary” cookie exemption under the ePrivacy Directive requires that necessity claims be accurate and unambiguous. An internal contradiction in the same paragraph undermines the legal basis for cookie use without consent.
Real-World Precedent: French CNIL fined Google and Facebook €210M combined (2022) for unclear cookie language that made opting out harder than accepting.
Recommended Fix: Rewrite to clearly distinguish three separate categories: (1) “Strictly necessary cookies — required for login and account-associated edits only,” (2) “Optional analytics cookies — improve your experience, may be blocked,” (3) “Third-party cookies — require explicit opt-in consent.”

Frequently Asked Questions: Is Wikipedia Credible, Reliable, and Trustworthy?

These questions are answered using only Wikipedia’s own published policies and academic studies. Each answer includes the exact policy quote and the source page. Last verified: November 2026.

Wikipedia is reliable for general orientation and background research, but it explicitly states it cannot be considered a reliable source for academic work. Its own General Disclaimer says: “WIKIPEDIA MAKES NO GUARANTEE OF VALIDITY… nothing found here has necessarily been reviewed by people with the expertise required.” Use Wikipedia to find primary sources, not as one itself. Last verified: November 2026.
Wikipedia’s own policies say so. The General Disclaimer states nothing has “necessarily been reviewed by people with the expertise required.” The Wikipedia’s essay “We aren’t Citizendium” makes the point that many schools and universities do not accept it as a source. There is no peer-review requirement before or after publication. Last verified: November 2026.
No — not all articles. Wikipedia:About states articles can be edited by “anyone with Internet access, except in limited cases in which editing is restricted to prevent disruption or vandalism.” Thousands of high-traffic articles are semi-protected (requiring a 4-day-old account with 10+ edits) or fully protected (administrators only). The tagline “anyone can edit” omits this. Last verified: November 2026.
Wikipedia’s own Medical Disclaimer states: “no warranty is made that any of the articles are accurate” and “the overwhelming majority of such articles are written, in part or in whole, by non-professionals.” A 2014 peer-reviewed study (Hasty et al., JAOA, doi:10.7556/jaoa.2014.035) found statistically significant discordance with peer-reviewed sources in 9 of 10 articles on the USA’s costliest medical conditions. Last verified: November 2026.
Wikipedia:About says the site is written by “human volunteers known as Wikipedians, not artificial intelligence.” But its Bots policy lists 2,859 approved bot tasks (as of November 2026; the figure updates automatically) that add content, fix links, and patrol edits. English Wikipedia passed a guideline in March 2026 (44–2 vote, WP:LLM) prohibiting large language models from generating or rewriting article content — implying AI content had been getting in. Last verified: November 2026.
Yes, on English Wikipedia, as a guideline — not a Wikimedia-wide policy. A Request for Comment closed March 20, 2026, with 44 votes in favor and 2 against (MediaNama reported 44–2; some outlets reported 40–2). The guideline (WP:LLM) prohibits using LLMs to generate or rewrite article content, with limited exceptions for copyediting and translation reviewed by humans. Spanish Wikipedia adopted a policy in January 2026 (vote 15–29 January, 49–3) that prohibits LLM-written articles, and created speedy-deletion criterion G12 for unreviewed LLM-generated pages. Last verified: November 2026.
Wikipedia’s Privacy Policy states it will “never” sell data “or share it with third parties for marketing purposes.” The same document then discloses it does share Personal Information with “third-party service providers or contractors to help run or improve the Wikimedia Sites.” Wikipedia does not sell data, but the “never sharing” promise is qualified by the service-provider disclosure in the same document. Last verified: November 2026.
Yes. Wikipedia uses performance and analytics cookies that collect information about how you use the site. Its Privacy Policy automatically receives your IP address and user-agent information on every visit. It classifies IP addresses as Personal Information. It does not honor Do Not Track browser signals. See: Wikimedia Privacy Policy. Last verified: November 2026.
No. Wikipedia’s own Privacy Policy states: “we do not change our behavior in response to a web browser’s ‘do not track’ signal.” Its stated reason is that it protects all users equally. However, under the California Consumer Privacy Act (CCPA), the Global Privacy Control — a legally binding DNT successor — must be honored by covered businesses. Last verified: November 2026.
Wikipedia article pages do not use third-party tracking cookies by default. However, the Wikimedia Cookie Statement discloses that the Wikipedia Store (Shopify-hosted) includes “a tracking pixel from TikTok” as part of its TikTok Shop integration. The same document also says “we will never use third-party cookies on our wikis unless we get your permission to do so,” and the Store disclosure in that document qualifies that promise. Last verified: November 2026.
Wikipedia’s Privacy Policy tells contributors they are creating a “permanent, public record.” The Foundation’s transparency FAQ says “We believe in a Right to Remember,” a phrase it applies to removal requests. GDPR Article 17 gives EU individuals the right to erasure of personal data. Wikipedia’s transparency reports show erasure requests regarding project content are largely declined and redirected to community volunteers. The right exists in law; Wikipedia resists it in practice. Last verified: November 2026.
Wikipedia’s Privacy Policy says “in most instances, Personal Information is deleted, aggregated or de-identified after 90 days.” This applies to server log data. Contribution histories — including usernames, edit content, and timestamps — are kept permanently and are publicly visible. The same Privacy Policy calls them “a permanent, public record.” These two timelines appear in the same document with no explanation of which applies when. Last verified: November 2026.
For edits made before November 4, 2025: yes — your IP address is permanently visible in the public edit history. After November 4, 2025, unregistered edits display a temporary account name instead (e.g., ~2025-31096-01). However, administrators and designated IP viewers can still look up the underlying IP address. Wikipedia classifies IP addresses as Personal Information in its Privacy Policy. Last verified: November 2026.
The Wikimedia Foundation’s legal page states it “does not set or enforce editorial policies” and “does not accept responsibility for the actions of these community members.” Wikipedia itself has no editorial board. The General Disclaimer says “nothing found here has necessarily been reviewed.” In D Magazine Partners v. Rosenthal (Supreme Court of Texas, 2017), the court held that a lower court erred by using a Wikipedia definition as the lynchpin of its analysis. The 2005 Seigenthaler incident — a false biography that, by Seigenthaler’s count, stayed online for 132 days — is the best-documented real-world consequence. Last verified: November 2026.
On May 26, 2005, an anonymous editor created a false Wikipedia biography of John Seigenthaler Sr., falsely claiming he was involved in the assassinations of President John F. Kennedy and Robert F. Kennedy. By Seigenthaler’s own count, it remained on Wikipedia for 132 days; the text was replaced on 23 September 2005 and purged from history on 5 October. Copies stayed on Answers.com and Reference.com for about three more weeks. Seigenthaler published an op-ed in USA Today (November 29, 2005) calling it “Internet character assassination.” The editor, Brian Chase, admitted he wrote it as a joke. Seigenthaler said he would not file a lawsuit. Wikipedia: Seigenthaler biography incident. Last verified: November 2026.
Wikipedia’s own Reliability of Wikipedia article states its editing model “facilitates multiple systemic biases, namely selection bias, inclusion bias, participation bias, and group-think bias” and that “an ideological bias on Wikipedia has also been identified on both conscious and subconscious levels.” A 2026 PNAS study (Mohammadi & Yasseri, doi:10.1073/pnas.2603294123) compared nearly 18,000 of the most-edited English Wikipedia articles with their Grokipedia counterparts and found that Grokipedia cited more right-leaning news sources on religion, history, literature and art. Last verified: November 2026.
Yes. Wikipedia was designated a Very Large Online Platform (VLOP) under the EU Digital Services Act on April 25, 2023 — one of the first 17 platforms designated. Wikimedia’s 2025 court challenge concerned the UK Online Safety Act, not the DSA. This requires Wikipedia to conduct annual systemic risk assessments, undergo independent audits, provide researcher data access, and publish transparency reports. See: European Commission designation press release. Last verified: November 2026.
Both have documented accuracy issues. Wikipedia’s own reliability article acknowledges errors, systemic bias, and cases of fabricated content surviving for years. Its own medical disclaimer admits non-professional authorship and zero accuracy warranty. AI systems often train on Wikipedia data — Wikipedia’s reliability article warns this can produce AI hallucinations that “intertwine facts originating from Wikipedia with fictional data points.” Neither Wikipedia nor general AI chatbots are suitable as primary sources for academic, medical, or legal work. Last verified: November 2026.

Sources & Evidence

The sources below are provided for checking the report against the underlying material. The report states an access period of November 2026; linked pages may subsequently change. Consult the full source and its revision history where available.

  • The audit screenshots reproduce Wikipedia and Wikimedia Foundation pages and are embedded within this HTML file for display. Base64 embedding does not prevent alteration or independently establish authenticity or capture dates.Source pages are linked directly in each finding above. Screenshots are presented for criticism and review; copyright exceptions depend on the particular use and applicable law. Wikipedia text is generally available under CC BY-SA 4.0, subject to source-specific notices; other material may have different terms. See the publication notice below for credits, licensing qualifications and correction requests.
  • Hero image: Screenshot of wikipedia.org homepage, November 2026. Wikipedia® is a registered trademark of the Wikimedia Foundation, Inc.
  • Published under Othakadai.com editorial policy and sources & methodology standards.

Purpose and independence. This independently published page by Arun Kumar Thiagarajan (Arun), site owner of Othakadai.com, is for information, public-interest commentary, criticism and review. It is not legal, medical or other professional advice, an official Wikipedia publication, or a judicial or regulatory finding. Neither Arun nor this website is affiliated with, sponsored by or endorsed by Wikipedia, the Wikimedia Foundation, or the organisations discussed.

Reading the analysis. Interpretations, severity labels and proposed fixes are the author’s assessments of the cited material. Describing a perceived conflict does not itself establish unlawful conduct, dishonesty or liability. Examples concerning other organisations do not establish wrongdoing by Wikimedia. Legal applicability depends on jurisdiction, facts, scope and exceptions; readers should consult the complete sources and qualified advisers where needed.

Credits for all screenshots, including the hero. The hero depicts Wikipedia.org; the audit screenshots depict the Wikipedia and Wikimedia pages linked beside each comparison and in the primary-source list above. Credit for the underlying text belongs to the respective page contributors; source-page histories identify contributors and revisions where available. Wikipedia text is generally available under CC BY-SA 4.0, subject to the applicable page notices. Wikimedia policy pages, photographs, logos and other media may carry different terms. No blanket licence or ownership claim is made over third-party material. Wikipedia names and marks belong to their respective trademark owner; their display identifies the material discussed, without implying endorsement. The footer’s rights reservation applies only to original material to the extent permitted by applicable licences.

Reuse and evidence limits. Screenshots are reproduced for contextual criticism and review. Any reliance on fair dealing under section 52 of India’s Copyright Act, 1957 is fact-dependent, not an automatic exemption. Where reuse relies on a Creative Commons licence, its attribution, licence-link and change-notice requirements apply. ShareAlike requirements apply to adaptations of the licensed material and do not automatically place the entire independent report under that licence. Applicable source-specific requirements remain relevant; see the Wikimedia Terms of Use and Trademark Policy. Source pages may change after capture. A screenshot records only the displayed excerpt, and base64 embedding alone does not authenticate it or prevent alteration. Any existing highlighting or cropping should be read alongside the linked full source.

Corrections, updates and rights concerns. If a source changes, an error is identified, or relevant context becomes available, this page may be corrected or updated following review. To suggest a correction, provide a response, or raise a copyright, attribution, privacy or other rights concern, please contact Arun through the website’s Contact page with the page URL, finding number, disputed wording or image, supporting evidence and requested remedy. Please avoid sending unnecessary sensitive personal information. Substantiated concerns can be addressed through clarification, correction, attribution, updating or removal as appropriate. Material corrections will be identified with a revision note and update date. Contacting the publisher is an invitation, not a condition for exercising legal rights.

Publisher and contact. Arun Kumar Thiagarajan — Othakadai.com, Madurai, Tamil Nadu, India. Publication date: 13 November 2026. For editorial enquiries, corrections and legal notices, use the Contact page. Publication from India does not by itself determine every applicable law or jurisdiction.

Scope of this notice. This notice does not certify every claim as accurate, guarantee compliance with every law or platform guideline, waive anyone’s rights, or exclude liability that cannot lawfully be excluded.

Arun Kumar Thiagarajan
Owner and editor, Othakadai.com · Independent digital marketing and SEO professional

Expertise: 7+ years in SEO and digital marketing, including website auditing, content strategy and on-page SEO. The author lists certifications in AI search, answer engine optimisation (AEO) and generative engine optimisation (GEO), such as HubSpot Academy AEO Fundamentals.

Scope of this page: an audit of Wikipedia’s own published policy pages on credibility, reliability, privacy and GDPR, AI-generated content, bias, medical reliability and cookies. Keywords: Wikipedia credibility, Wikipedia reliability, Wikipedia privacy, GDPR, AI content.

Limits: this is not legal, medical or professional advice. The author is not a lawyer or doctor, so legal points are for review by a qualified adviser.

How it was compiled: facts checked against the cited primary sources; AI tools used for research and drafting, with results checked before publishing. Corrections are welcome via the Contact page. Full author profile.

© 2026 Arun Kumar Thiagarajan (Othakadai.com). All rights reserved.

Independent digital research · Not affiliated with or endorsed by the Wikimedia Foundation