make some changes to how it collects and retains information about its 12 million Canadian users. Privacy Commissioner Jennifer Stoddart singled out a number of issues her office found with Facebook's practices. These include the fact that the company's privacy policies are often incomplete and confusing, and that third-party applications can access far more information about a user than would be necessary for the application to work well. The complaint that triggered this investigation was filed by the Canadian Internet Policy and Public Interest Clinic (CIPPIC).If Facebook wants to comply with Canadian privacy laws, the company will have to
Stricter Default Privacy Settings
Among other things, the commissioner, who reports to Parliament and can force companies to make changes to their privacy practices, asked Facebook to change the default privacy settings of photo albums to "Your Networks and Friends" instead of "Everybody," and to make sure that user profiles are inaccessible to search engines by default. Facebook is working on implementing these changes and with the per-object privacy settings that were recently introduced, most of these issues had been resolved already anyway.
The area the commissioner focused on most, though, was third-party application and the amount of private information developers can access through these, and as of now, Facebook has not agreed to make any of the recommended changes. The commissioner recommends that Facebook should limit developers' access to only those pieces of information that are necessary to run an application, and that the company should also implement measures to prohibit the disclosure of personal information of users who aren't actually using an application themselves.
Deleting Accounts Will Remain Difficult
Some Good News for Facebook
It's important to note that the original complaint that set off this investigation also alleged that Facebook should not ask users for their date of birth, name, and email address when registering for a Facebook account. Stoddard, however, argues that this is a reasonable request, even if Facebook didn't make the reasons for why it asks for this information very clear.
Overall, most of these recommendations seem quite reasonable, though especially with regards to third-party applications, it's a bit puzzling why Facebook doesn't want to do more to ensure its users' privacy.
As Facebook expands, its privacy settings have gotten more and more complicated, to the point where most users probably are just baffled by the number of choices and decide to just leave everything in the default setting.