Canada's Privacy Commissioner Investigating Facebook
A formal complaint against Facebook has been filed by the Canadian Internet Policy and Public Interest Clinic (CIPPIC) to Canada's Privacy Commissioner. The complaint was filed on Friday, and an investigation is now underway.
Prepared by law interns, the complaint details 22 separate violations by the Palo Alto, California company, with the practice of collecting personal information in initiating downloads of application being the most notable. PIPEDA, Canada's Privacy Act, states that companies should not collect more information than is necessary to provide the product or service to the end user.
Facebook has already responded by claiming that the complaint contains "factual errors", most notably that Facebook users willingly share their personal information.
My take - When you choose to download an application, you are informed that your personal information will be shared, and you have the option to not download the application. No one is forcing anyone to share the personal information. The applications do not cost the end-user any money, but the personal information is certainly valuable. Personal information has long been a currency on the internet. At least Facebook comes about it honestly. As long as measures are in place to safegaurd this information, I don't see a violation here. But that is a critical question that needs to be addressed.
I pulled this exerpt from Facebook's Terms and Conditions:
"The Facebook Platform does not give Developers access to your e-mail address, personal website, instant messenger ID, telephone number or street address ("Contact Information"). Facebook will only disclose your Contact Information to third parties in accordance with the Facebook Privacy Policy."
Here is how the Privacy Policy addresses this:
"We let you choose to share information with marketers or electronic commerce providers through sponsored groups or other on-site offers." ..."We may offer stores or provide services jointly with other companies on Facebook. You can tell when another company is involved in any store or service provided on Facebook, and we may share customer information with that company in connection with your use of that store or service."
My biggest concern here is how these third parties are using this personal information. As a user downloading an application, you are not made aware of these third party policies. Here is where I believe Facebook may have a problem, and I'm honestly not sure if they can be indemnified should one or more of the application developers illegally share personal information.