Facebook breaches Canadian privacy law: commissioner
Last Updated: Thursday, July 16, 2009 | 3:20 PM ET
Facebook shares its users' personal information with developers who create games and quizzes in a way that breaches Canadian privacy law, the Office of the Privacy Commissioner of Canada has found.
The popular social networking site, which is used by 12 million Canadians and 200 million people worldwide, also keeps personal information indefinitely after users deactivate their accounts, contrary to the Personal Information Protection and Electronic Documents Act, says the report released Thursday by assistant privacy commissioner Elizabeth Denham.
The office's main concern was that users could not always give "meaningful consent" to the use of their personal information due to a lack of transparency on the site.
"We found that, although Facebook provides information about privacy issues, it is often confusing or incomplete," Denham said at a news conference.
Users should be able to opt out of actions that could lead them to lose control over their personal information, she added. In some cases, that information could then be used for marketing purposes or even identity theft.
'For a hangman application ... there is no use for the developer to know where the person lives or have their personal email address.'— Jordan Plener, CIPPIC
Facebook declined interview requests Thursday, but issued a statement saying it is about to introduce new privacy features that it believes "will keep the site at the forefront of user privacy and address any remaining concerns the commission may have." It added that in the meantime, it will continue to work with the commissioner's office and to raise awareness about its privacy controls.
4 areas of concern
The Office of the Privacy Commissioner's report found that Facebook continues to breach PIPEDA in four ways and it made recommendations to correct the problem. It found:
- Facebook doesn't have enough safeguards to prevent 950,000 third-party developers around the world from getting unauthorized access to users' personal information, nor does it ensure users have given "meaningful consent" to allow their personal information to be disclosed to the developers. Recommendation: Developers should only get the information needed to run the application. Users would have to specifically consent to the release of that information after being told why it is needed. Information about anyone other than the user would not be disclosed.
- Facebook keeps information from accounts deactivated by users indefinitely. Recommendation: Facebook should have a policy to delete the information after a reasonable length of time, and users should be informed of the policy.
- Facebook allows users to provide personal information about non-users without their consent. For example, it allows them to tag photos and videos of non-users with their names, and provide Facebook with their email addresses to invite them to join the site. It keeps the addresses indefinitely. Recommendation: Facebook should only keep non-users’ email addresses for a reasonable, specific length of time and should make its users aware that they need to seek consent of non-users before posting information about them.
Denham and privacy commissioner Jennifer Stoddart emphasized, however, that they aren't telling people to stay away from social networking sites.
"We all understand that social networking sites can be a wonderful way to connect," Stoddart said at the news conference. She added that not everyone sees privacy in the same way, and some people may be more willing to share personal information more widely than others.
Denham added that users also need to take responsibility by reading privacy policies and using the information to make their own choices.
The investigation was launched by the privacy commissioner's office in response to a complaint from the Canadian Internet Policy and Public Interest Clinic, which is based at the University of Ottawa.
Jordan Plener, a law student who initiated the complaint on behalf of CIPPIC, said he had a number of concerns about areas such as Facebook's default privacy settings and the personal information available to developers.
"For a hangman application, for example, there is no use for the developer to know where the person lives or have their personal email address."
The complaint cited allegations on 12 topics. Denham deemed allegations about four topics unfounded. Facebook accepted Denham's recommendations and resolved problems in four other areas.
Plener said that was a good start. But he noted that so far, Facebook has refused to accept Denham's other recommendations.
With respect to the four remaining topics, the assistant privacy commissioner has asked Facebook to reconsider its recommendations to resolve the problems and said she will follow up in 30 days. If Facebook does not comply at that point, the privacy commissioner's office can have its recommendations enforced by the Federal Court.
Denham noted that the company has been co-operative throughout the investigation, and she is hopeful that it will comply.
Top News Headlines
- Obesity now recognized as a disease
- The American Medical Association has voted to recognize obesity as a disease, while doctors in Canada say they also treat it as such. more »
- Neil Macdonald: Washington's obsession with leakers
- Julian Assange and Edward Snowden are just the most prominent targets in an all-out legal and propaganda campaign that America's security apparatus is mounting against leakers everywhere, Neil Macdonald writes. more »
- Caregiving dads stigmatized at work suggests UofT study
- Fathers who participate in child rearing and housework are likely to be labeled slackers and "failed men" at work, according to a study spearheaded by researchers at the University of Toronto and Long Island University. Are active dads the norm at your workplace? more »
- Dozens of children seized from Manitoba Mennonite community
- Child welfare authorities have removed all but one child from a small Mennonite community in rural Manitoba. more »
Latest Technology & Science News Headlines
- How open is Ottawa's new 'open data' website?
- Treasury Board President Tony Clement is touting the federal government's revamped data portal as a "new natural resource." But that online window for previously published data arrives at the same time the government faces controversy over just how open it really is. more »
- Genetically-modified crop inventors win World Food Prize
- Three pioneers of plant biotechnology whose work brought the world genetically modified crops have been awarded this year's World Food Prize. more »
- 'Tweet' gets 21st century update in Oxford dictionary
- Tweeting in the social-networking sense has become so pervasive that the Oxford English Dictionary has broken one of its own rules to add new meanings for "tweet" as both a noun and a verb. more »
- B.C. backcountry mobile maps cause concern
- The BC Search and Rescue Association is raising concerns about a set of free, high-resolution topographical backcountry maps released by the provincial government on Tuesday. more »
- High levels of radiation found in groundwater at Fukushima
- High levels of a toxic substance called strontium-90 are found in groundwater at the devastated Fukushima Daiichi power plant in Japan — coming to light even as the country moves closer to bringing its nuclear reactors back online. more »
Bob McDonald's Blog
- After Hadfield, who's the next Canadian in space? Jun. 13, 2013 12:01 PM Canada's singing astronaut announced his retirement this week, leaving Jeremy Hansen and David Saint-Jacques to fill his space boots. But there is no date set for when the next Canadian will fly in space.
Quirks & Quarks
- June 22: How to Build a Brain Jun. 19, 2013 10:42 AM Scientists are embarking on ambitious projects to understand the incredible complexity of the human brain and to simulate it in a computer. They hope it will help us understand mental disorders, as well as the nature of thought, memory, and conciousness.
- Bob Rae quits as MP in 'very emotional' decision
- 2 men jailed in Dominican wedding fight back in Canada
- Wearing a mask at a riot is now a crime
- B.C. teacher duct-taped students' mouths
- Half of First Nations children live in poverty
- Obesity now recognized as a disease
- Huge ancient city at Angkor Wat revealed by lasers
- Are e-cigarettes safe to puff?
- How open is Ottawa's new 'open data' website?