Facebook Ireland accused of creating 'shadow profiles' on users, nonusers
Laura Locke |
October 21, 2011 4:20 PM PDT
Translation by Autumnson Blog
歐洲數據隱私倡導者 Facebook頁面上的標誌
(Credit: euro v. facebook.org)
Facebook Ireland is under fire for allegedly creating "shadow profiles" on both users and nonusers alike.
愛爾蘭Facebook被圍攻因為據稱創建“影子人物簡介”在使用者和相似非使用者兩者上。
The startling charges against the social-networking giant come from the Irish Data Protection Commissioner (IDC), which, Fox News reports today, is launching a "comprehensive" investigation against Facebook Ireland for extracting data from current users--without their consent or knowledge--and building "extensive profiles" on people who haven't even signed on for the service.
針對社交網絡巨頭令人吃驚的指控來自愛爾蘭數據保護專員（IDC），那在今日的福克斯新聞網報導，正在展開一項對愛爾蘭FACEBOOK的“全面”調查，為了從目前的用戶中提取數據 - 未經同意或知會 - 和在沒有簽署服務的人身上建立“大量的人物簡介”。
Names, phone numbers, e-mail addresses, work information, and perhaps even more sensitive information such as sexual orientation, political affiliations, and religious beliefs are being collected and could possibly be misused, Irish authorities claim.
姓名、電話號碼、電郵地址、工作資料、及甚至更敏感的信息例如性取向、政治派別和宗教信仰，正在被收集並可能被濫用，愛爾蘭當局宣稱。
Interestingly, Facebook users living outside of the United States or Canada are contracted with Facebook Ireland. Facebook users living inside the United States and Canada are contracted with Facebook Inc., headquartered in California. Running afoul of privacy laws is much more likely for companies operating outside of the United States, especially in Europe, where privacy laws are much more stringent.
有趣的是，居住在美國或加拿大之外的Facebook用戶，都與與 Facebook愛爾蘭締結； 居住在美國和加拿大境內的Facebook用戶則與總部設在加州的Facebook公司締結。美國以外運作的公司經營與隱私法律衝撞是大有可能的，尤其是在歐洲，在那裡隱私法是嚴格得多。
On August 18, the IDC received a formal complaint against Facebook Ireland made by Max Schrems, a 24-year-old Austrian law student. In June, after attending a talk by a Facebook executive at Santa Clara University in California, while on a study abroad program, Schrems apparently asked Facebook for his data. To his surprise, the company sent him a CD with 1,200 pages--three years worth--of highly personal "deleted" material ranging from friend requests to his history of "Pokes" to lists of people he had "defriended" to entire chat messages.
Schrems, in turn, filed 22 discrete complaints about Facebook to the IDC. That has led to an official "statutory" audit of Facebook Ireland that's going to get underway next week and could possibly lead to "immediate charges" if Facebook is found to be in violation of data protection laws, a representative for IDC told Fox News. Facebook could also be fined up to $137,000 (U.S. dollars) according to the U.K.-based Guardian.
"I'm not saying there was anything criminal or forbidden there, but let's just say that, as someone wanting to work in law, there was stuff which could make it pretty impossible for me to get a job," Schrems was quoted as saying in The Guardian. "By holding on to data its users assumed was deleted, Facebook was acting like 'the KGB or the CIA,' said Schrems.... It's frightening that all this data is being held by Facebook."
In his "Shadow Profiles" complaint, Schrems explains how Facebook goes about eliciting data from users and nonusers:
"This is done by different functions that encourage users to hand personal data of other users and nonusers to Facebook Ireland (e.g., 'synchronizing' mobile phones, importing personal data from e-mail providers, importing personal information from instant-messaging services, sending invitations to friends, or saving search queries when users search for other people on facebook.com)."
"Even commercial users that have a 'page' on facebook.com have the option to import their costumers' e-mail-addresses to promote their page."
"By gathering all this information, Facebook Ireland is creating extensive profiles of nonusers and it is also enriching existing user profiles. This is done in the background without notice to the data subject ('shadow profiles'); the user or nonuser is experiencing only some of the result of these shadow profiles: there are "friend" suggestions by Facebook Ireland based on the information, or nonusers get invitations showing many users that they actually know in real life."
"This means that Facebook Ireland is gathering excessive amounts of information about data subjects without notice or consent by the data subject."
Here is a link to europe v. facebook.org, ironically, a Facebook page devoted to Schrem's attempt to challenge Facebook Ireland. As of this writing, it has only 600 fans.
"The allegations are false," Andrew Noyes, Facebook's manager of public policy in Washington, D.C, said in a statement replying to CNET's request for comment. He elaborated on the company's handling of deleted information, a key aspect of the data infractions cited in the complaint.
"We enable you to send e-mails to your friends, inviting them to join Facebook. We keep the invitees' e-mail address and name to let you know when they join the service. This practice is common among almost all services that involve invitations--from document sharing to event planning--and the assertion that Facebook is doing some sort of nefarious profiling is simply wrong. In addition, Facebook offers more control than other services by enabling people to delete their e-mail address from Facebook or to opt-out of receiving invites."
"Also, as part of offering people messaging services, we enable people to delete messages they receive from their inbox and messages they send from their sent folder. However, people can't delete a message they send from the recipient's inbox or a message you receive from the sender's sent folder. This is the way every message service ever invented works. We think it's also consistent with people's expectations. We look forward to making these and other clarifications to the Irish DPA."
http://news.cnet.com/8301-1023_3-20123919-93/facebook-ireland-accused-of-creating-shadow-profiles-on-users-nonusers/
沒有留言:
發佈留言