Privacy Group Finds Loopholes In New Facebook Privacy Policy

March 24, 2009

Facebook’s privacy policies have been a lightning rod for controversy, and it’s easy to see why.

The site is the nation’s new town square. People come, meet others, share thoughts and expose the kind of personal information they might in close, casual conversations.

Facebook creates a loophole for the limited use of personal data, says Jeff Chester

Facebook creates a loophole for the "limited" use of personal data, says Jeff Chester

The trouble is the close, casual conversations take place on the Internet, where all sorts of strangers can listen

For the most part, Facebook has been respectful of individual rights to privacy. But several of its polices have come close to the edge, such as its Beacon advertising program that let advertisers list a member’s online purchases.

Last month, Facebook proposed changes to its privacy guidelines that gave it new liberties to use personal data from members, but then revoked them in the face of a gathering storm of protest. In the process, it agreed to let members comment and vote on future changes to the rules.

The Center for Digital Democracy praises the new public participation, but complains of loopholes and ambiguity in the new policy.

“In all the principles, the wording allows enough legal wiggle room for Facebook to ignore them completely,” writes Executive Director Jeff Chester.

For instance, statements such as “people should have the freedom to share whatever information they want” would be better phrased, “People have the freedom to share whatever information they want,” Chester says in seven pages of criticism made available Tuesday.

He goes on to say Facebook fails to adequately inform users how third-party developers might use personal data for advertising and marketing.

Facebook also creates a “huge loophole” when it reserves its “limited” use of personal data without stating what that limited use is.

While Facebook’s steps toward openness are laudable, questions from privacy advocates such as Chester are well worth the asking.


Behavioral Advertising: Thumbs Up Or Down?

March 20, 2009

Behavioral or target advertising seeks to direct ads to Internet users based on information collected from their prior online browsing. The goal is to customize the Internet experience so that Internet users receive content that reflects their own interests and preferences. For example, someone who is an avid golfer may want to be shown advertising relating to golf clubs but not about knitting, gardening or other matters unrelated to his or her interests. While such a customized experience may have perceived advantages, there can be privacy worries, as the online world may seem a much smaller place when individual browsing habits are tracked, collected and used to place a person within certain categorical boxes.

At this point, many Internet users are aware of behavioral advertising. Indeed, according to a recent survey by TRUSTe, two out of three are aware that their browsing information may be collected for advertising purposes. Does this mean that there is more discomfort about this form of advertising? No, actually. Consumer discomfort with this form of advertising actually has gone down from 57% in 2008 to 51% this year. But nevertheless, more than half of consumers still have some discomfort.

Consumer discomfort with behavioral advertising has dropped, says Eric Sinrod

Consumer discomfort with behavioral advertising has dropped, says Eric Sinrod

While this discomfort with behavioral advertising persists, 72% of survey respondents report that they find online advertising to be intrusive and annoying when the product and services advertised are not related to their interests. This suggests that a more customized approach reflective of user preferences would be less intrusive and annoying.

But just because some Internet users may favor a customized experience over generalized Internet advertising, this does not mean that they do not have privacy concerns relating to behavioral advertising. Indeed, not only do about half of surveyed consumers have discomfort with targeted advertising, many of them undertake affirmative actions to surf the Web as anonymously as possible. For example, the percentage of people who delete cookies from their computers at least once a week has increased from 42% in 2008 to 48% this year.

An interesting aspect of the TRUSTe survey is the finding that while about 75% of respondents report that they know how to protect their personal information online, 39% concede that they do not do so consistently. This proves the point that privacy is like oxygen. Just like we can state that privacy and oxygen are important to us in the abstract, we can become complacent and only care about them when they are impacted and disappear.

The failure to take steps to protect one’s own privacy can contribute to problems like identity theft. Of survey respondents reporting on the last year alone, 35% believe that their privacy has been invaded based on information they provided online, 6% report that their identity has been stolen, 11% state that they have experienced credit card theft, and 13% indicate that they have suffered from unauthorized sharing of sensitive information such as health or financial records.

As in other areas, the law is struggling to catch up with technology. Technology advances out of the box at warp speed, and the wheels of justice grind slowly in an effort to grapple with new realities. When it comes to behavioral advertising, we still do not have crystallized laws or regulations on the books.

The Federal Trade Commission (FTC) recently issued a set of guidelines called Self-Regulatory Principles for Online Behavioral Advertising, however. Your author has summarized those principles in a prior column. In essence, these principles recommend transparency and customer control, as well as reasonable security and limited time periods for retention of customer data. Companies that adhere to these principles will be more likely not to find themselves in legal hot water when it comes to their behavioral advertising practices.

Probably, over time, behavioral advertising will become an expected, and perhaps even greatly desired, part of the Internet experience, with more developed legal regulations to ensure greater consumer privacy protection.

This column is written by Eric Sinrod, an attorney at Duane Morris and a guest blogger on TechPulse 360. It was originally published on FindLaw.com.


New Facebook Statement Of Rights Preserves User Privacy

February 26, 2009

Facebook’s new terms of service – now called a Statement of Rights and Responsibilities – preserves the user privacy the company had sough to amend a few weeks ago.

In the six page document, reduced from nearly 40 pages of legalese, the company backs away from the claim it can use a member’s personal content as it sees fit.

The new Statement of Rights and Responsibilities is written in English, not legelese

The new Statement of Rights and Responsibilities is written in English, not legelese

Facebook had tried to impose these conditions earlier this month with the altered terms of service. The changes were met with an outcry from privacy groups.

In the new Statement of Rights and Responsibilities posted on Thursday, “we make it clear that users own all of their content,” the company said in a post on its site. “Second, we removed the terms “perpetual” and “irrevocable” from the license grant” for personal content.

The new document similarly limits Facebook’s use of personal data by saying it is subject to a member’s privacy settings, a further enhancement of privacy rights.

It also resolved a final controversy. When a member leaves Facebook, his or her content is eventually deleted from the site, the new statement says.

“When we did (the earlier changes) we made a few mistakes,” says site founder mark Zuckerberg. “Being as transparent as possible is a really valuable thing.”

Facebook members are able to comment and vote on the new policy before it is adopted.


Facebook Takes Extraordinary Step By Giving Users A Voice On Site Policies

February 26, 2009

Facebook created an extraordinary Web presence by giving members a place to link to friends, post personal information and see the personal information of others.

We have to hold ourselves to a higher standard, says Mark Zuckerberg

We have to hold ourselves to a higher standard, says Mark Zuckerberg

Now it is taking another exceptional step: it is giving users the opportunity to review, comment and potentially vote on policy changes proposed for its terms of service.

The change isn’t pure altruism. Earlier this month, the company changed its terms of service to give it greater freedom with the personal data people post on the site, even after they cancel their memberships. The policy changes unleashed a firestorm of protest from privacy groups.

On Thursday, Facebook said users would have a role in determining future policies.

“I think we really underestimated the sense of ownership Facebook users have in the site,” said founder and CEO Mark Zuckerberg said on a conference call. “We have to hold ourselves to a higher standard.”

The company’s plan will offer users the opportunity to review changes before they are enacted and to comment. Based on the number of comments – and how controversial a change becomes – a vote will be held, most likely giving members the chance to pick from a number of options.

“It will help strengthen the community,” said Zuckerberg. “We can’t just put up new terms of service without everyone’s permission.”


2008 Top 20 Most Trusted Companies For Privacy: Facebook In, Google Out

December 15, 2008
A web site with the TRUSTe seal protects users' privacy

A web site with the TRUSTe seal protects users' privacy

Facebook replaced Google as one of 2008 top 20 most trusted web sites in the world.

Despite the current financial climate, American Express retained its place from last year as the “Most Trusted Company for 2008 for Privacy”. While Nationwide, U.S. Bank and eLoan managed to stay in the top 20, Countrywide Financial and Bank of America (which acquired Countrywide) dropped off the list.

Technology sector privacy is improving

The technology sector showed marked improvement as eBay Apple, Yahoo, Microsoft, and H-P all bettered previous rankings. Other tech companies include AOL, Dell, IBM and Intuit. Verizon was the only telecom operator of the list.

The ranking was published this morning by San Francisco privacy firm TRUSTe which ensures online privacy and protects confidential user information on more than 2,400 Web sites and many of the most highly trafficked, including Yahoo, AOL, Microsoft, Disney, eBay, Intuit, and Facebook.

The study asked 6,486 adult-aged U.S. consumers which companies they thought were most trustworthy and which did the best job safeguarding personal information. A total of 706 companies were named by consumers; 211 made the final list of most trusted companies.

The top 20 ranking follows.

2008 Ranking 2008 Ranking
1 American Express (remained number one) 12 Intuit (+7)
2 eBay (+6) 13 WebMD (-1)
3 IBM (no change) 14 Yahoo! (new to the top 20)
4 Amazon (+1) 15 Facebook (new to the top 20)
5 Johnson & Johnson (+1) 16 Disney (-1)
6 Hewlett Packard (+10) 16 AOL (-12)
6 U.S. Postal Service (+1) 17 Verizon (new to the top 20)
7 Procter & Gamble (+2) 18 FedEx (new to the top 20)
8 Apple (new to the top 20) 19 US Bank (-2)
9 Nationwide (remained the same) 20 Dell (-7)
10 Charles Schwab (-8) 20 eLoan (-9)
11 USAA (+4)

What’s Hot According To The Media: Netbooks, Privacy, But Maybe Not Web 2.0

December 4, 2008

Netbooks? Hard to use. Google? Get ready for adolescence. What about green tech and Web 2.0?  Are they real?

Its time for a new discussion of online privacy, says John Markoff

It's time for a new discussion of online privacy, says John Markoff

The Silicon Valley press had its say Wednesday evening at a Computer History Museum event entitled: the Media Predicts 2009. Here is what we learned:

“If you look at TechCrunch, I’ve scrubbed the word Web 2.0 from the site,” said J. Michael Arrington, the founder of the site that (at least up to now) has chronicled the rise of Web 2.0. Suggesting there was little substance behind the flash, Arrington added, “I don’t know what Web 2.0 was.”

Not surprisingly, his views met with disagreement from other panelists. Web 2.0 is open interfaces and open tools that have allowed people to “put things together in lego-like fashion,” ventured John Markoff of The New York Times.

And with ultra-low cost publishing and some interactivity, it has changed politics, the media and next it will change the way people will do their jobs, said others.

Netbooks are hard to use, says J. Michael Arrington

Netbooks are hard to use, says J. Michael Arrington

What about green-tech investing? “It’s going to grind to a halt for some time,” predicted Mark Veverka, the West Coast editor at Barron’s. “(Investors) are not going to find it to be as successful” as investing in information technology.

However, “I don’t think the Yahoo deal (with Microsoft) is dead,” offered Veverka. “There’s no reason why this goes away.”

On the subject of netbooks, toast of the computer industry and the recent bright spot in an otherwise dull market, panelists found more agreement. “There will be hundreds of millions of them in a year,” if smart phones such as the iPhone and Android-based models are included, said Arrington. But “it’s probably not good news for Microsoft.”

Low-cost netbooks often don’t use Windows or opt for an inexpensive version of the operating system.

Next year could be a tough year for Microsoft, concurred Markoff. Windows revenue may not go up for a long time.

But netbooks are hard to use, Arrington shot back. The screens are small, video is jerky and their keyboards are difficult to navigate.

On a more sublime topic, Markoff suggested it is time for a new discussion of online privacy – not individual but group privacy as companies such as Google mine large amounts of search data for market intelligence.


Follow

Get every new post delivered to your Inbox.

Join 32 other followers