Business ETC uses cookies. By continuing to browse this site you are agreeing to our use of cookies. Click here to find out more »
Dublin: 14 °C Wednesday 19 June, 2013

Privacy group says it may bring Facebook to Irish court

Austrian student group Europe-v-Facebook alleges legal breaches against Facebook Ireland, which hosts global accounts.

Image: STRLHG/The Canadian Press

Updated, 09:54

AN AUSTRIAN STUDENT GROUP which has been seeking an overall reform of Facebook’s privacy regime says it may bring Facebook to court in Ireland over alleged failures to comply with Irish laws on data protection.

The ‘Europe v Facebook’ group alleges that Facebook is not in compliance with Irish and European laws on data protection, despite audits from the Irish Data Protection Commissioner (DPC) – and is prepared to bring the social network to court over it.

Facebook’s legal agreement with its users mean that Facebook Ireland Ltd is the official supplier of account services to all users outside the US and Canada – meaning that the accounts of worldwide users are required to be in legal compliance with Irish data laws.

The group says audits undertaken by the DPC had done a good job of ensuring Facebook’s compliance with some laws – including turning off facial recognition in photographs for users based within the EU – but claims that the audit “has not always delivered accurate and correct results”.

A statement from the group said this was because the DPC’s audit, which was undertaken on an advisory and non-binding basis, “might not need such accuracy”.

“In some cases we also had to wonder if the authority has really checked Facebook’s claims, or if they have blindly trusted Facebook”, spokesman Max Schrems said.

Schrems also said the group believed the DPC’s interpretation of EU laws was often inconsistent with the interpretations of similar authorities in other countries.

“We have to understand the position of the Irish authority,” Schrems remarked. “They had to deal with a whole armada of lawyers from Facebook.

On the other hand we have a fundamental right to privacy and data protection in the EU. When it comes to basic freedoms and fundamental rights, our understanding for the situation of the authority comes to an end.

The group has asked the DPC to release Facebook’s own responses to the 22 complaints it made against Facebook last year, and is seeking a legally binding decision on each matter – and is prepared to go to court to appeal any DPC decision it does not agree with.

The group has already begun a fundraising drive to cover the potential legal costs.

In a statement the DPC said it had not received any direct contact from Europe v Facebook, but had “consistently and repeatedly outlined to it our happiness to take forward formal decisions of the Commissioner in relation to the complaints submitted in whatever time-scale is acceptable to it”.

“We have not received any contact from it in this respect but would assume based on the press release that we will shortly receive such contact which will allow us to commence the process,” the spokeswoman said.

Previously: Facebook agrees to major privacy changes following DPC audit

  • Share on Facebook
  • Email this article
  •  

Read next:

Comments (31 Comments)

  • This is only the beginning. More and more of our data is going to be stored online. Just look at how quickly we moved from a situation where most of our data was stored locally on our HD or a card in our camera, to one where smartphones now mostly offer to upload constant instantly to cloud services.

    As data (especially mobile data) becomes much faster and cheaper, we’re going to move to a situation where the vast majority of our personal data is held remotely in the cloud.

    I’m not entirely sure that legislation has caught up with that new reality. What we need is a framework that allows these new services to develop, but that also protects people’s privacy rights.

    To me, the most important thing is that people are aware of what data is being stored, and have a right to access it, amend it and delete it without any fuss.

    However, we also need to strike a balance too, I wouldn’t like to see overly draconian laws that just crush social media / cloud services out of existence either. It’s going to all come down to a need for good regulation, sensible laws and total transparency by providers or it’s all going to get incredibly messy over the next few years.

    Reply
  • Came off it 2 years ago…best decision I made in years

    Reply
  • K 04/12/12 #

    It is quite simple actually:

    “If you’re not paying for it you might not be the customer. You might be the product being sold.”

    http://geekandpoke.typepad.com/.a/6a00d8341d3df553ef0147e0e1aec2970b-pi

    Reply
  • Aidan 04/12/12 #

    Instead of pissing and moaning about it don’t use it. Simples. Sick of hearing about people whining about a free service that uses your info when the solution is so simple.

    Reply
    • thats not a solution the same thing will happen with other websites.

      Reply
    • Aidan 04/12/12 #

      It’s an excellent solution. It works 100% of the time. If you want a service that doesn’t use your data expect to pay. Nothing is free.

      Reply
    • Winston 04/12/12 #

      Have to agree… There is NOTHING on Facebook about an individual that he/she hasn’t permitted.

      (That’s why I’m a dog!)

      Reply
    • Couldn’t agree more, if people are too dumb to realise that their information is being stored and sold on and comes under ownership of FB as soon as they post it then so be it.

      Reply
    • I agree with most of the points made above.

      That being said Facebook does seem to make it deliberately difficult to know exactly what is public and what is private. I do a trawl through my Facebook profile every so often to make sure all the settings are pared down to the minimum but it takes time to do that and I am sure that I miss things from time to time. It really should be possible for them to design one screen which allows you to set all your privacy and notifications settings in a clear simple manner.

      Reply
    • @Aidan Well said Barry ;-)

      Reply
    • Sounds like a certain organisations approach to family planning. Abstinence will solve all!

      Reply
    • Sounds great….
      …until you realise that Facebook the website isn’t the problem so much as Facebook the social database and authentication mechanism. There are now thousands of websites that use your facebook account as your login for those sites, and the number’s growing daily. This is one of the big new market tools, and Facebook, Google, Yahoo, Apple, and everyone else is trying to get an exclusive lock on it; if that ever happens, even if you’ve not had a Facebook account until then, you’ll be stuck.

      And in the meantime… just ‘cos you have no facebook account doesn’t mean there aren’t photos of you or data about you up there. So ensuring that they follow the data protection laws isn’t some academic exercise for moaners and whingers; it’s what’s protecting you from things like your face on a “spot the paedophile” facebook page — and taking down pages like that isn’t exactly something they’re demonstrating diligence in:
      http://www.bbc.co.uk/news/uk-northern-ireland-20556775

      Reply
    • Aidan 04/12/12 #

      I know sure I have to have a twitter account to post up in here. Have come across the Facebook login a few times. Sites/services that require it I don’t use.

      Reply
    • And you can do that… for now. But more and more and more services and sites are requiring it; and while they give you a choice at the moment of twitter or google or facebook for logins, that’s kindof deciding which kind of ice cream you want – ie. grand if you want ice cream, not so grand if you wanted a steak sandwich.

      And that’s why cases like this one are important.

      Reply
    • Aidan, you should read the linked article about the complaints..
      Apparently one of them relates to Facebook gathering data on non users too. So at present, simply not having an account doesn’t mean that they aren’t pissing all over your privacy >:( all the more reason that these challenges are important.

      Reply
  • ” turning off facial recognition in photographs for users based within the EU ”
    They did?
    So why does it keep flagging people in my photos and asking if they’re such-and-such a person (and usually getting it right)?

    Reply
  • If you want total privacy then keep off public forums or at least limit what you put up on it.

    Reply
  • If Facebook pull out of Ireland lets invade Austria. Nothing like a good war to boost the economy. We could call it the ‘War of the Arsebook’

    Reply
  • theres no such thing as a free lunch , ass gas , or grass , no one rides free , keep it real , lol

    Reply
  • So the main issue you hear from people is, “FB is using my data and storing it and giving it to third parties etc.”.

    Tell me this, of the people ‘concerned’, Who has your data been sent to? What fundamental impact had it had on your life? Cops knocking down your door for an opinion you had?

    None, nothing? Didn’t think so.

    Reply
    • Have you ever noticed the way certain ads seem to follow you around the net? Maybe advertising something you’re interested in? For me it’s the same music software everytime, one that I use a lot. Part of the reason these ads follow is due to Facebooks provision of information to the advertisers.

      There’s your example of how this stuff affects you on a daily basis. As well as the login platform mentioned earlier.

      Reply
    • People take notice of those ads??

      Ad blocker on Mozilla, problem solved.

      And is it really that big of an issue that you’re so concerned about having a few ads on the side of a page TRY and target you to buy things? They’re not saying ‘click this or else…’
      That’s like complaining about a deal in a supermarket. Lets say someone working there saw you buy a packet of biscuits then the next day they approached you directly, because they had seen you buying them the previous day, to offer you a 2 for 1 deal on biscuits. The same as an online profile with tesco.ie, dominos.ie, pretty much all of them, they all store info to target you with deals, so why don’t we hear about these websites too?

      Anyway, it’s hardly a surprise that ads are targeting people more. How else do you think the investors are going to get their hundreds of millions back?

      Reply
    • Yeah, nothing nastier than ad profiling would ever happen, I mean these companies, they’re even more trustworthy than the government, with incredibly strict controls on that data, and it’s never abused….
      http://gawker.com/5637234/

      Ah. Right. So that could happen I suppose. Since, you know, it already did…

      Reply
    • Isolated incident from inside the company, it doesn’t have any connection with this story. This could happen anywhere, everyday, and it doesn’t. This is one incident. Unless you have a list of links? No, didn’t think so. This is not what this article or the comments are referring to as regards data protection.

      Reply
    • Facebook don’t give your data to third parties. It would be counterproductive. If you auth an app e.g. The Journal, you are giving the data requested to that company to use in accordance for the reasons granted, Facebook Platform policies and the organisations own privacy policy. The organisations privacy policy is accessible when you see the auth dialogue.

      Facebook are probably the least likely reason that ads follow you around the net and it is mainly due to other technology that web sites use.. Plenty of companies using cookies for retargeting. Amazon, for example, are incredible at it. I looked at a wireless keyboard and the keyboard has been following me around the ‘net ever since.

      On Facebook.com, advertisers can target people based on connections, likes and interests but the advertiser does not get access to personal profile info.

      Of course, coming around the corner is “big data” where organisations are combining vast amounts of data from multiple sources to profile consumers.

      Reply
    • Ah, I see. Isolated incident, could never happen again, nothing to do with data protection, and since you’ve no other incidents, it doesn’t count.

      Would you ever…

      1) The fact that it can happen at all is the point here.
      2) Of course it can happen again. What, you think Google has figured out how to prevent crime and just hasn’t shared the solution with the rest of society?
      3) It has *everything* to do with data protection. It’s a textbook example of what data protection laws are there to prevent!
      4) It *has* happened more than once: http://themaresnest.wordpress.com/2012/08/26/ea-forum-member-kaiteee_mac-stalked-by-ea-employee-andry-silva/ (and that’s just cases where an employee accessed the data; there have been cases of people being stalked by ordinary users on facebook and at least one case of murder as a result)

      Reply
    • Brian, of course Facebook doesn’t give that information away, nobody does.

      Why would you give it away, when you can sell it for a pretty hefty profit?

      Of course, there is the concern over people stealing it, and they don’t even have to steal it from Facebook; look at the LinkedIn breakin earlier this year (http://www.pcworld.com/article/257045/6_5m_linkedin_passwords_posted_online_after_apparent_hack.html) and remember how many people use the same password for multiple accounts…

      Reply
    • My last post went in the wrong place. Facebook don’t sell user data or lists to third parties.

      Mark – the incidents/risks you describe are the same for any organisation that stores personal data.

      Reply
    • The nature of them is the same Brian; but the severity is much. much greater for companies like Facebook and Google because of the large amount of data they store on each person and the amount by which it’s interconnected. Nobody’s saying that your Steam account is perfectly safe but Facebook’s a no-no; it’s just that there are a lot more people on Facebook and they have a lot more personal data in their accounts on Facebook than on Steam. Hence, the need for oversight of companies like Facebook and Google when it comes to data security is far greater.

      Reply
  • Mark – when I say give it away I mean commercially sell it. There’s zero benefit to FAcebook of selling this data as they’d have no business model. Facebook do not sell user data to third parties. They sell advertising on the platform based on user data.

    In regard to the examples that you give, these risks are the same for anybody that holds or processes data – utility companies, banks, government departments etc. etc.

    Reply

Add New Comment