Canadian law clinic files privacy complaint against Facebook

A Canadian university law clinic has filed a privacy complaint against Facebook,
alleging that the social-networking site's policies include 22 separate violations
of a Canadian privacy law.

The complaint, from the Canadian Internet Policy and Public Interest Clinic
(CIPPIC), based at the University of Ottawa Faculty of Law, says Facebook has
failed to inform its members of how personal information is disclosed to third-party
advertisers, and has failed to obtain permission from members to disclose their
personal information. Facebook's policies violate the Canadian Personal Information
Protection and Electronic Documents Act (PIPEDA), CIPPIC said
in its complaint, filed with the Office of the Privacy Commissioner.

CIPPIC targeted Facebook
because the site is popular in Canada, with about 7 million members of the site
in a nationwide population of 33 million, said clinic director Philippa Lawson.
Social-networking sites are "proving to be a tremendous tool for community-building
and social change, but at the same time, a minefield of privacy invasion,"
Lawson said. "We chose to focus on Facebook ... because it appeals to young
teens who may not appreciate the risks involved in exposing their personal details
online."

Canadian Privacy Commissioner Jennifer Stoddart has a year to act on CIPPIC's
complaint. The commissioner's office focuses on negotiation to resolve privacy
disputes, but it can seek court injunctions if negotiations fail to resolve
the issues.

Facebook, in a statement, said it prides itself on "industry-leading controls"
that it offers users over their personal information.

"We’ve reviewed the complaint and found it has serious factual errors
-- most notably its neglect of the fact that almost all Facebook data is willingly
shared by users," Facebook said. "The complaint also misinterprets
PIPEDA in a manner that would effectively forbid voluntary online sharing of
information and ignores key elements of Facebook’s privacy policy and architecture."

Facebook has taken several steps in recent months to resolve continuing privacy
concerns. In mid-March, the site rolled out new privacy controls that allow
users to choose which of their friends can see personal information, and in
April, the site released a plug-in to allow users to monitor and delete cookies
created by the controversial Facebook Beacon advertising system.

The complaint is based on Facebook's privacy policies and controls as of March
27, Lawson said.

Sign up for ITworld's Daily newsletter
Follow ITworld on Twitter @IT_world

• Email
• Print
• Share
  • Slashdot
  • Digg
  • Stumble
  • Reddit
  • Newsvine