Facebook set for data privacy overhaul following European audit
The Irish Data Protection Commissioner has completed a comprehensive audit of Facebook Ireland, revealing key concerns and recommendations.
Irish Data Protection Commissioner Billy Hawkes has concluded his audit of Facebook, revealing encouraging news regarding the social media giant's commitment to change.
Facebook has found itself in hot water several times in 2011 as a result of its data tracking practices and user privacy settings. The controversy came to a head this fall when, amid a climate of renewed vigilance from European Union regulators, the social media pioneer submitted to a full audit of its Dublin headquarters.
This week, Commissioner Hawkes brought an end to the three-month investigation and released a road map that will guide Facebook Ireland's reforms moving forward.
"The audit has found a positive approach and commitment on the part of Facebook Ireland to respecting the privacy rights of its users," Hawkes explained. "Arising from the audit, Facebook Ireland has agreed to a wide range of 'best practice' improvements to be implemented over the next six months, with a formal review of progress to take place in July of next year."
Citing Facebook's "almost Darwinian nature" in terms of innovation, auditors stressed the importance of employing robust security mechanisms capable of addressing current concerns and evolving in step with the site's global popularity. As a result, Irish authorities noted that the latest report "is not the conclusion of [their] engagement with Facebook Ireland."
The Commission was also careful to root out any ambiguity in its recommendations and made several pointed requests of Facebook administrators. Specifically, the strategic vision called for a mechanism that effectively allows "users to convey an informed choice for how their information is used and shared on the site in relation to [third-party applications]." Enhanced transparency and user control were also requested in regards to the tagging and posting of content, exchange of personal data during registration and the use of controversial new features including facial recognition technology.
By all accounts, Facebook administrators have raised no objections with the findings of the audit or the auditors recommendations.
"Audit reports are not frequently made public, but in this case, the DPC and Facebook agreed at the outset that – in the interest of transparency – the contents of the audit should be made public, in full, immediately upon completion," company spokesman Richard Allen wrote in a statement posted on the website. "We believe this is the best way for users and policymakers around the world to understand how thoroughly the DPC performed its examination and how closely we will be working together in the future."
Allen was also quick to highlight the areas of innovation highlighted in the report. Facebook's use of cookies to identity unusual or suspicious activity, avoidance of account tracking behaviors and management of advertisement were all praised for their adherence to best practices.
Facebook's Dublin facility now manages the accounts of all users residing outside of the U.S. and Canada, but it will be interesting to see how its ongoing collaboration with the DPC will inspire or shape response to similar data security concerns surrounding the site's North American operations.
Late last month, Facebook settled Federal Trade Commission charges that implicated administrators in several deceptive data management practices. As a result, the social media giant has submitted to periodic assessments from independent, third-party auditors for the next 20 years.
Then just this week, a Bloomberg report confirmed that a California District Court has upheld a decision that would allow Facebook to be sued over advertising practices. Judge Lucy Koh stated that Facebook users may have legitimate concern over the "misappropriation of their names, photographs, and likenesses" in the endorsement of banner ads.
Security News from SimplySecurity.com by Trend Micro
Spotlight
Cloud Computing
- Security in backups means more than just encryption
- Employees must buy into the company policy for better cloud security
- Desktop virtualization can enhance security performance
- Cybersecurity cooperation becoming military necessity
Virtualization
- Virtualization-specific challenges could threaten data security
- Evolving threats put security skills in high demand
- Virtualization security requires education, access control management
- Tips for launching effective virtual security tools
Internet Safety
- Virtualization-specific challenges could threaten data security
- Evolving threats put security skills in high demand
- Virtualization security requires education, access control management
- Tips for launching effective virtual security tools
Vulnerabilities & Exploits
CTO Insights
First Line of Defense
Newsletter
Stay up to date with the latest news and information on online threats.
Recent News
- FBI trying to train financial execs on cyber threats
- Wall Street has data security concerns over Bloomberg reporting
- Security in backups means more than just encryption
- Employees must buy into the company policy for better cloud security
Tag Cloud
cloud cloud computing cloud computing security Cloud Security Compliance & Regulations Consumerization Current News cybercrime Data Privacy data security Encryption Government Policy Internet Protection Internet Safety Internet Safety - DO NOT USE Internet Security Malware Mobile Security Mobility Policy Policy - DO NOT USE Privacy Privacy & Policy Private Cloud Public Cloud Reports Research Spotlight threat intelligence threat research Trend Labs Underground Economy virtualization Vulnerabilities Vulnerabilities - DO NOT USE web security web threats
Comments
[...] regulatory agencies have already promised a probe of the data privacy revisions. Building on its prior experience in high-stakes auditing procedures, Ireland’s deputy Data Protection Commissioner Gary Davis [...]
Pingback by Does Google’s data privacy update go too far? Far enough? | Simply Security on February 9, 2012 at 4:19 pm
[...] store shared information. In December, Irish data protection commissioner Billy Hawkes completed a three-month investigation into Facebook’s data privacy practices and released a road map of best practices to ensure [...]
Pingback by Are we living in a post-privacy era? (Op-ed) | Simply Security on March 16, 2012 at 2:03 pm