A Wall Street Journal Investigation Proves the Need For the Social Media Privacy Protection Act

A recent Wall Street Journal investigation found that some third party applications on Facebook and MySpace were both obtaining more personal data from the applications' users than they were allegedly allowed. This situation has been going on for a long time so I am not sure why this was such a shock to major media outlets. I have been writing about the need for stronger internal privacy controls by the major social media sites for months because of this issue.

On June 2, 2010, I blogged that Facebook/Disney's Tickets Together application was inherently dangerous. This application enables child molesters to know in advance where our children may be at a particular date and time. After Facebook/Disney launched the application, the New York Times wrote an extremely positive article about the application without fully understanding how the application works. Even after I pointed out how dangerous this application may be to our children, the New York Times dropped the ball and did not investigate this application or others. However, I am glad that the Wall Street Journal did the investigative reporting that was needed to demonstrate that some social media web sites may turn a blind eye to this troubling problem.

Earlier this year, Gawker reported that Google fired an engineer because the engineer allegedly accessed user accounts without authorization. The engineer allegedly accessed the accounts of young children. According to TechCrunch, this is the second time a Google engineer has been fired for unauthorized access of users' accounts. In that same TechCrunch article, it linked to a blog post that alleged that at least two Facebook employees have been fired for accessing its users' data.

I am loathe to articulate the need for further government regulation because the government has a hard time enforcing the laws already on its books and delivering some basic government services. For example, why can't the government settle on a secure and reliable method to vote? Electronic voting without a paper receipt that may be reviewed for a recount is too easily susceptible to hackers.

An easy solution to unauthorized data proliferation is to avoid putting your personal or professional information on a social media site. However, the social media companies want you to continue to "share" so they can monetize your data and users want to continue to "share" so they showcase themselves to others. There is no easy answer here but since the industry continues to fail miserably to enforce its own internal policies and does not have any real incentive to protect its users' data it may be time for Congress to act. Therefore, until the major social media companies demonstrate a real initiative to protect its users' personal data I strongly advocate for the passage of the Social Media Privacy Protection Act.

To learn how to protect and monetize your social media profile you may contact me at www.shearlaw.com.

Copyright 2010 by the Law Office of Bradley S. Shear, LLC. All rights reserved.

The Social Media Privacy Protection Act Part II

On April 29, 2010, I blogged that the Social Media Privacy Protection is in the works. This bill has not yet been passed; however, I think this type of legislation will eventually be enacted because up until this point the online business community has not done enough to police itself.

On July 22, 2010, the U.S. House of Representatives Subcommittee on Commerce, Trade, and Consumer Protection held a hearing regarding how online service providers handle user information. During the session, online industry leaders asked Congress to act in a manner that will be flexible enough to address the rapid advances in digital media. On July 27, 2010, the U.S. Senate Committee on Commerce, Science, and Transportation will have a full committee hearing on consumer online privacy. Representatives from Apple, Facebook, Google, and AT&T are scheduled to testify.

Capital Hill's interest in electronic media privacy issues has made the online business community realize that it must do a better job of being proactive than reactive to privacy issues. Unfortunately, it has taken the threat of congressional action for Internet service providers and online service providers to realize that consumers still highly value their privacy.

I believe these hearings are long overdue. However, I think it would be a mistake for Congress to overreact and draft legislation that hampers innovation. Therefore, if Congress decides to act I hope it is in a manner that offers consumers and businesses the privacy they desire without harming the online community's ability to create cutting edge technological advances.

To learn more about online privacy issues and how to monetize your social media assets you may contact me at www.shearlaw.com.

Copyright 2010 by the Law Office of Bradley S. Shear, LLC.  All rights reserved.

The Social Media Privacy Protection Act

The Social Media Privacy Protection Act is coming. No such Act has yet been proposed but I predict this will be the name of the Act that regulates social media. The FTC is currently seeking comments on revising the Children's Online Privacy Protection Act (COPPA) to include social media. The U.S. Senate Committee on Commerce, Science, and Transportation held a hearing today examining how social media affects COPPA. Congress is first determining how it can best protect children's privacy in the social media age. The next logical step is to create legislation that will include the rest of their constituents.

On April 27, 2010, 4 U.S. Senators: Charles E. Schumer (D-NY), Michael Bennet (D-CO), Mark Begich (D-AK), and Al Franken (D-MN) publicly released a letter that they had sent to Facebook's CEO Mark Zukerberg regarding their concerns about Facebook's recent user changes. The letter urged Facebook to allow its users to have more personal control over the site's privacy settings, to change its third party data storage policy, and to simplify the instant personalization options.

I recommend that my clients set their Facebook privacy settings so that only their Facebook Friends are able to view their personal information. It is best to limit the amount of information you post and share because if your account is ever compromised by a hacker the information can easily be used to steal your identity. If you thought that the Internet Age was scary after watching Sandra Bullock's 1995 movie "The Net" the Social Media Age should terrify you.

The recent MIT Project Gaydar study proved that just by inserting data from a person's social media profile it is possible to determine a person's sexuality. I was surprised that so many people appeared shocked by this finding. If a researcher or marketer knows a Facebook user's personal habits and hobbies, friendships, employer/job, socio-economic status, marital/family status they have the ability to make a lot of predictions about a person. Profiling or forecasting is used by law enforcement, wall street, and meteorologists. The more data points you have the more accurate the model or prediction.

In the "old days," your mail carrier knew more about your business than even your neighbors. Then it was the credit card companies and credit bureaus who knew everything financially about you. However, nobody or entity, including the U.S. Government has the treasure trove of data that Facebook accumulates about its users. Most of these other entities spend a tremendous amount of time and resources collecting your data. What is amazing is that Facebook is able to obtain its data for free directly from its users. Not a bad concept, eh?

It appears that Facebook does not yet understand that its recent actions have angered enough people to prompt Congress to become extremely interested in the manner in which it utilizes and protects its users' personal information. Facebook's failure to acknowledge this is evident by the response that Facebook's spokesman Andrew Noyes and vice president of global communications and public policy Elliot Schrage have so far provided.

Social media users must be careful about what personal information they post on social media. In addition, social media users must be proactive in protecting their social media personal profile and companies must be aware of the legal liabilities that they may incur for mishandling their customer's personal information. To learn more about these issues you may contact me at www.shearlaw.com.

Copyright 2010 by the Law Office of Bradley S. Shear, LLC. All rights reserved.