Canadian official takes issue with Facebook privacy

An investigation by Canada's Privacy Commissioner is concerned that Facebook is only paying lip service to members' privacy, and has called on it to do more.

"It's clear that privacy issues are top of mind for Facebook, and yet we found serious privacy gaps in the way the site operates," commissioner Jennifer Stoddart said in a release Thursday, which explained that the investigation was spurred by a complaint from the Canadian Internet Policy and Public Interest Clinic (CIPPIC).

About 12 million of Facebook's 250 million active users are Canadian.

More specifically, Stoddart expressed concern that while it's easy for members to deactivate their accounts, it's less clear on how to actually delete them. Facebook therefore can retain member data from deactivated accounts for an indefinite period of time, which is in violation of a Canadian privacy law; Stoddart's office's investigation recommended that Facebook designate a time period after which that data is permanently deleted.

The report also suggests that Facebook tighten privacy regulations on its developer platform to ensure that third-party developers can't access too much personal information from the users who have installed their applications.

Here's something interesting from the release: "As a result of the investigation, Facebook has announced a new privacy tool for its site, which is aimed at giving users more control over who gets to see each item on their Facebook page."

Facebook launched those new tools in a conference call with reporters early this month. But the social network did not say at the time that there had been any impetus from lawmakers behind it.

"Facebook is pleased that the Canadian Federal Privacy Commissioner has dismissed most of the inaccurate claims brought by CIPPIC, and that we were able to collaboratively resolve other issues raised in the complaint," a statement from Facebook read. "The Commissioner also recognized, as we do, that privacy and user control on the social web is a new area, which requires websites, users and data protection authorities to work together. Without question, Facebook and the Canadian Privacy Commissioner's Office share the common goal of making the Internet more privacy friendly for Canadians and users across the world."

"As part of our continued leadership in developing privacy tools that advance user control over their information, Facebook will soon be introducing a number of new additional privacy features to its service that we believe will keep the site at the forefront of user privacy and address any remaining concerns the Commission may have," the statement continued. "In the meantime, we will also continue our efforts to work with the Canadian Federal Privacy Commissioner to address the outstanding areas highlighted in the report and will continue our efforts to raise awareness of the privacy controls on Facebook."

This post was updated at 11:04 a.m. PDT with comment from Facebook.

[tram1]

What about the privacy of people who DON'T have or WANT a Facebook account? I work in IT and I refuse to share my life online with anyone. It's too Orwellian for me and I value my privacy too much. From a technical standpoint, I also understand how easily the data on their servers could be compromised. Therefore, I chose not to have a Facebook account. But that doesn't stop others from posting my pictures/info on Facebook. The only way I would be able to remove pictures tagged with my name would be to open an account myself. That's ridiculous and very unjust. I consider it an invasion of my privacy, and I have absolutely ZERO control over it.

[ddesy]

People have long been able to make simple, free web pages easily containing pictures and information about other people. Facebook is only as much as an invasion as any other site, user or company generated, is.

Don't blame Facebook. Blame those who post your information without your permission!

[tram1]

Funny, but I don't recall placing the blame on Facebook directly. It's a fantastic tool and people find it very useful. Of course it's the people posting who are ultimately responsible. My point is that I shouldn't have to police that to maintain my own personal privacy. The problem is that technology is evolving faster than privacy legislation can be written to protect people's privacy rights online. By the time they get around to it, it's too late.

[jessiethe3rd]

It's interesting how opening up your privacy has now become the cool thing. People do not understand the simple matters of how keeping your information can come back to haunt you. See Google's privacy statement and ability to retain your information indefinitely as yet another serious situation.

[sanenazok]

Another bureaucrat desperately trying to prove that he's necessary during a recession. Yes, yes, facebook violates some BS privacy rule. Who doesn't? Nobody's forced to use Facebook. I for one don't have the time.

[sanjayb]

So why doesn't our government just ban Facebook for Canadian users? Yeah what a great idea! NOT!

Just another stupid Canadian politician trying to win votes and look good.

[gdmaclew]

The Canadian Privacy Commiissioner is NOT a politician and therefore is not trying to win votes.
She is an Officer of Parliament and reports to the House of Commons and the Senate.

[Harrison912]

I use FaceBook mainly to socailly market my safety and security web site so I'm always interested in anything going on there. I have many customers in Canada so thanks, Caroline, for sharing ths little bit of Canadian/FaceBook news.

[aclu-nc]

Want to understand what this all means and how to change your Facebook privacy settings now to better protect your personal information? Check out the ACLU of Northern California Facebook Privacy Quiz at http://apps.facebook.com/aclunc_privacy_quiz/

More info at our blog at http://www.aclunc.org/techblog.