Feeds

Irish DPC to investigate Facebook

More information than they need

Secure remote control for conventional and virtual desktops

Even if you’re not a Facebook user, chances are that your computer is carrying cookies from The Social Network™. They’re scattered all over the Web like digital malarial mosquitoes waiting for the next host.

They’re also, according to Austrian law student Max Schrens, part of an infrastructure that allows Facebook to build “shadow profiles” of people who have never signed on to Facebook and therefore have never consented to its data slurp.

According to Schrens’ complaint to the Irish Data Protection Commissioner, these shadow profiles are mainly gathered by encouraging users to share information about their friends, even if those people aren’t users. For example, he writes, when a user synchs a mobile phone to their Facebook account, they’re handing information on non-users to Facebook; similarly, importing e-mail address books, importing profiles from services like Twitter, and even sending Facebook invites to friends – all of these help round out the profiles Facebook can build of non-users.

According to the Irish Times, the group Europe-v-Facebook has used his research to force a privacy investigation by the Data Protection Commissioner.

His formal complaint claims that the information collected by Facebook Ireland is excessive, and is gathered “without notice or consent by the data subject. This information might also constitute sensitive data such as political opinions, religious or philosophical beliefs, sexual orientation and so on.”

Schrens also says the interested generated by the Europe-v-Facebook group has been so intense that it’s hampering Facebook’s ability to respond to his request for information held about him: “due to the recent high volume of personal data access requests, there are significant delays and that Facebook would be unlikely to respond within the 40-day period set down by the Irish data-protection office. So I can’t verify Europe-v-Facebook’s claim that the data contained therein differs from what I downloaded from Facebook,” he notes.

Other complaints raised by Europe-v-Facebook include the alleged use of the “Like” button to track people “all over the Internet”; facial recognition technology; the retention of messages after users have deleted them; and the ability for users to be added to groups without their consent.

Australia’s privacy watch-puppy watchdog, the Privacy Commissioner, recently passed over the cookies issue, and is unlikely to pursue the “shadow profiles” debate without a specific complaint.

El Reg has requested comment from Facebook. ®

Internet Security Threat Report 2014

Whitepapers

Why cloud backup?
Combining the latest advancements in disk-based backup with secure, integrated, cloud technologies offer organizations fast and assured recovery of their critical enterprise data.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?
Reducing the cost and complexity of web vulnerability management
How using vulnerability assessments to identify exploitable weaknesses and take corrective action can reduce the risk of hackers finding your site and attacking it.
Top 5 reasons to deploy VMware with Tegile
Data demand and the rise of virtualization is challenging IT teams to deliver storage performance, scalability and capacity that can keep up, while maximizing efficiency.