LinkedIn quietly introduces a new privacy setting that defaults to blocking a user's connections from exporting the user's personal email address
Context & Ripple Effects
This is an early move in LinkedIn's long arc of tightening who gets access to member data. Back in 2016 it let users privately signal job interest to recruiters — giving members more control over their own visibility — and the same instinct shows up here, but pointed at other users rather than at LinkedIn itself.
The quiet rollout matters because defaults do the work: instead of asking members to lock down their contact info, LinkedIn makes the connection graph non-exportable unless the owner says otherwise. That posture hardens over the following years, from pulling Group-based ad targeting in the EU after a complaint (the 2024 EU retreat) to defaulting AI training on user data while offering opt-outs (confirmed in September 2024) — each step keeping more member data inside LinkedIn's own walls.
First-order effects
- Recruiters, salespeople, and anyone who built workflows around exporting connections' email addresses lose that channel by default — outreach now has to run through LinkedIn's own messaging, which LinkedIn can meter and monetize.
- Members get protection they never asked for: their personal email is shielded from bulk harvesting by connections without them having to find or flip any setting.
Second-order effects
- Third-party recruiting and sales tools that ingested exported LinkedIn emails are pushed toward in-platform integrations or licensed APIs — or toward scraping, which raises LinkedIn's enforcement burden.
- Rival professional networks can pitch openness and data portability as a differentiator, though few have LinkedIn's graph density to make the trade-off painful.
Third-order effects
- If the pattern holds, platforms stop treating member contact data as portable by default and become gatekeepers of every outreach path — the same consolidation logic that later showed up in LinkedIn's EU ad-targeting restrictions and its AI-training opt-out regime.
- Regulators reading this sequence see that defaults, not settings menus, determine real-world privacy outcomes — pushing policy debates toward requiring protective defaults rather than just disclosure.
The trend: Social platforms are shifting from open data portability toward default-on privacy controls that keep member relationships and contact data inside the walled garden.