# GDPR: no avatar in /rest/api/2/user/picker response

**URL:** <https://community.developer.atlassian.com/t/gdpr-no-avatar-in-rest-api-2-user-picker-response/27609>\
**Category:** Jira Cloud\
**Created:** [March 5, 2019, 3:03am UTC](https://community.developer.atlassian.com/t/gdpr-no-avatar-in-rest-api-2-user-picker-response/27609 "2019-03-05T03:03:05Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![abe.kenichi](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@abe.kenichi](https://community.developer.atlassian.com/u/abe.kenichi)\
**Post date:** [March 5, 2019, 3:03am UTC](https://community.developer.atlassian.com/t/gdpr-no-avatar-in-rest-api-2-user-picker-response/27609/1 "2019-03-05T03:03:05Z")

</div>

Hi,

In GDPR mode(given ‘x-atlassian-force-account-id’:true in request headers),  
the response of ‘/rest/api/2/user/picker?showAvatar=true&query=xxx’ doesn’t include any avatars.

But for example, /rest/api/2/user/assignable/search returns the response which includes avatars.

Does anyone know how to make avatars include in the response of /user/picker?

Thanks

---

<div class="post-metadata">

**Author:** ![ianRagudo](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/ianragudo/32/44527_2.png) [@ianRagudo](https://community.developer.atlassian.com/u/ianRagudo)\
**Post date:** [March 5, 2019, 6:39am UTC](https://community.developer.atlassian.com/t/gdpr-no-avatar-in-rest-api-2-user-picker-response/27609/2 "2019-03-05T06:39:41Z")

</div>

Hello @abe.kenichi,

Based on REST API migration guide, the user object for `/user/picker` changed and does not include avatarUrl ([https://developer.atlassian.com/cloud/jira/platform/deprecation-notice-user-privacy-api-migration-guide/#picker](https://developer.atlassian.com/cloud/jira/platform/deprecation-notice-user-privacy-api-migration-guide/#picker)).

As for `/user/assignable/search`, the user object still contains avatarUrl ([https://developer.atlassian.com/cloud/jira/platform/deprecation-notice-user-privacy-api-migration-guide/#user](https://developer.atlassian.com/cloud/jira/platform/deprecation-notice-user-privacy-api-migration-guide/#user)).

Hope this helps.  
Ian

---

<div class="post-metadata">

**Author:** ![abe.kenichi](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@abe.kenichi](https://community.developer.atlassian.com/u/abe.kenichi)\
**Post date:** [March 6, 2019, 1:39am UTC](https://community.developer.atlassian.com/t/gdpr-no-avatar-in-rest-api-2-user-picker-response/27609/3 "2019-03-06T01:39:03Z")

</div>

Thanks, @ianRagudo.

I wonder why only /assignable/search returns avatars…

It would like /user/picker to do as same.

---

<div class="post-metadata">

**Author:** ![abe.kenichi](https://avatars.discourse-cdn.com/v4/letter/a/47e85d/32.png) [@abe.kenichi](https://community.developer.atlassian.com/u/abe.kenichi)\
**Post date:** [March 13, 2019, 5:00am UTC](https://community.developer.atlassian.com/t/gdpr-no-avatar-in-rest-api-2-user-picker-response/27609/4 "2019-03-13T05:00:48Z")

</div>

It may be a defect.

[https://ecosystem.atlassian.net/browse/ACJIRA-1732](https://ecosystem.atlassian.net/browse/ACJIRA-1732)

---

<div class="post-metadata">

**Author:** ![ianRagudo](https://sea1.discourse-cdn.com/atlassiandeveloper/user_avatar/community.developer.atlassian.com/ianragudo/32/44527_2.png) [@ianRagudo](https://community.developer.atlassian.com/u/ianRagudo)\
**Post date:** [March 13, 2019, 5:04am UTC](https://community.developer.atlassian.com/t/gdpr-no-avatar-in-rest-api-2-user-picker-response/27609/5 "2019-03-13T05:04:01Z")

</div>

I missed to update this post about the public-facing issue raised. Thank you for pointing it out.