SOCIAL NETWORK:WATCH OUT FOR SIDE EFFECTS

FACEBOOK & CO

SURFER BEWARE

HAVE YOU EVER WONDERED?

TIPS

Facebook, MySpace & Co. A lively debate is in progress be-tween those who extol the unique communication chancesprovided by social networks and those who only see the risksto surfers’ private life and rights.

The Italian DPA decided to draft this short guidance to helpthose planning to sign up to a social network and those whohave already joined a social network to use this new toolknowledgeably. It is not meant to cover all issues; it is morea quick guide that can be used both by newbies and by ex-perts.

We wish to provide food for thought, but mostly a few piecesof advice to ensure that one of the most valuable goods wehave – our identity and our personal data – can be protectedalso in the “virtual world”.

SOCIAL NETWORK:WATCH OUT FOR SIDE EFFECTS

FACEBOOK & CO

5

SOCIAL NETWORKS

Social networks (such as Facebook,MySpace, etc.) are “virtualmarketplaces”, that is places whereyou can meet people via the Internetand share pictures, videos, thoughts,pals’ addresses, and much more.Social networks are “the” forum forsharing materials; they provide aunique means for communicating,however they entail risks to the privatesphere of the individuals concerned.

Social networks were set up initially inthe academic world by colleagues whowanted to “keep in touch” and “teamup” after starting their job careers.Facebook, one of the best-knownamong these networks, was initiallynothing else but the virtual translationof the college “photo book” – a sort ofelectronic billboard where you couldlook up your old pals and exchangeinformation with them. One of themost recent developments is pushingfor the increased integration betweensocial networks and mobile phones, sothat any message posted online isturned into a sort of multiple SMS-message that can immediately reachall our friends.

6

The tools made available by socialnetworks allow us to keep in touchwith our family living in a different city.They enhance communication also inthe social and political arena byturning us into campaigners for issueswe are keen on. They can make iteasier to pass on knowledge betweencolleagues and between employeesand their company.

Social networks give you an impressionof being in a space of your own, or amember of a small community. In fact,this is a misconception and may leadusers to unveil too large a portion oftheir private lives and disclose verypersonal information – which maycause “side effects” even after manyyears’ time. One should notunderestimate these side effects.

7

SOME OF THE WORLD’S LEADINGSOCIAL NETWORKS

Facebook, MySpace, Hi5, Flickr,Skyrock, Friendster, Tagged,LiveJournal, Orkut, Fotolog,Bebo.com, LinkedIn, Badoo.com,Multiply, Imeem, Ning, Last.fm,Twitter, MyYearbook, Vkontakte,aSmallWorld, Windows Live, Xiaonei.

THE ITALIAN DPAAND THE INTERNET

The Italian data protection authority is monitoring the development of Internet-based communications and is committed at both Europeanand international level to setting forthrules and guidelines that can protectusers and their personal freedoms.But the most effective safeguard is self-protection – that is, the carefulmanagement of one’s own personal data.

SURFER BEWARE

9

FOREVER, OR JUST ABOUTWhen you post your personal data on a social networkingsite, you are no longer in control. Your data may be stored by all your contacts and by the members of the groups you signed up to; they may be processed and disseminatedeven after many years. In some cases, by accepting to join a social network you grant the SN company a licence to useall your online materials forever… your pictures, chats,posts and rants.

DEACTIVATION VS. CANCELLATION?If you decide to sign out of a SN site,you are often allowed to “deactivate”your profile – not to “cancel” it. Data and materials you posted onlinemight be retained in the SNcompany’s servers or IT archives.Read the terms of use carefullyalong with the privacy safeguardslaid down in the contract you acceptwhen signing up.

APPLICABLE LAWMost socialnetworking sites arebased abroad alongwith their servers. If a legal dispute arisesor a privacy breach is at issue, it is notalways the case thatItalian and Europeanlaws can protect you.

10

WHO CAN DO WHATNobody can protect your privacy better than yourself. Think twice before postinginformation you would not wish to circulate or be used against you. Report breaches to the Italian DPA so that we can step in to protect you.

OTHERS’ PRIVACYWhen you post your friend’sor a relative’s picture, whenyou tag that picture, maybeby adding the persons’ firstand last names, are you sureyou are not breaching theirprivacy? When in doubt, ask for their permission.

BUSINESS IS BUSINESSSocial networking companiesusually fund their business by selling targeted advertising.The value of these companiesis also closely related to theirskill in performing an in-depthanalysis of their users’profiles, habits and interestsso that they can re-sell this information to anyonebidding for it.

11Garante per la protezione dei dati personali

THAT’S NOT ME!Watch out for fake profiles! It onlytakes a picture, a name, and someinformation on a person’s life to layhands on the person’s online identity.There have already been severalcases in which famous actors,politicians, public figures as well as“normal” people have found thatothers were managing their identityon social networks and blogs.

HOW ABOUT MY BANK ACCOUNT?Take care about the information you post online. Your date and placeof birth are enough to tell your TaxID. Other types of information mighthelp a criminal to trace your bankaccount, or even your UserID and password.

HAVE YOU EVER WONDERED?

13

IF YOU ARE A BOY / A GIRL:

If you knew that your neighbour or your teacher could read your online postings, would you post the same things in the same manner?

Are you sure that the pictures and information you are posting will also be OK in a few years’ time?

You are uploading/posting “that” picture of your friend – sure, but would you like him or her to do the same to you?

Can the members of your user groups read your personal info?

Are you sure you would show “that” picture to your newgirlfriend/boyfriend?

IF YOU ARE A PARENT:

You told your child not to touch the oven when it’s hot, you taught him how to cross the street, you warned him to beware of strangers… Did you also teach him how to tell dangers on the Net?

Did you teach him how to defend himself against online aggressionsor kid predators? Did you teach him not to give out personal detailson him and his friends to strangers?

Have you ever tried surfing with your child? Did you ask him to showyou how to use the Internet, or which groups he signed up to?

Have you ever asked him whether he was cyber-bullied?

14

IF YOU ARE SEEKING A JOB:

Do you know that recruitment companies look up for candidateinformation via the main online search engines?

Would the pictures you uploaded to social networking sites and your postings stand in the way of your next job?

Does the CV you sent to that company match with the one you posted on the Internet?

Are your online chats and rants in line with your professionalexpectations?

IF YOU ARE A “SAVVY”:

Did you check your personal privacy settings?

Did you breach someone’s privacy rights by uploading “that”material?

Did you commit an offence by showing those pictures around,or writing those posts?

Did you check user licences, royalties and copyright rules for the documents, pictures or videos you uploaded?

15

IF YOU ARE A PROFESSIONAL:

Do the users allowed to interact with your profile fit in with the professional target you set yourself?

Can the groups you signed up to on a SN affect your work?

If you are flamed by a member of your SN, are you ready to provide the appropriate response?

Did you consider whether you are sharing information with someone that might be harmful to your business?

Do you know that several chat services – including those providedby SN sites – allow recording and storing chat contents?

TIPS

17

SELF-CONTROL

Go easy withpublishing yourpersonal data(especially your name,address, and phonenumber) in a userprofile, or withaccepting new friends.

THINK TWICE

Remember thatpictures andinformation mightresurface yearsahead thanks tosearch engines.

RESPECT OTHER PEOPLE

Don’t upload picturesand personal informationconcerning other peoplewithout their consent.You might commit a criminal offence.

CHANGE LOGIN AND PASSWORD

Use different loginsand passwords from those you use for other websites,your email and your online bankingoperations.

18

NICKNAMES

Whenever possible,use differentnicknames for thedifferent groups yousigned up to. Do notinclude your date of birth or otherpersonal informationin your nickname.

INFORM YOURSELF

Get information on whomanages the service and howthey protect personal data.Remember: you have the rightto know how your data areused. See under “privacy” or “privacy policy”.

PRIVACY LEVELS

Use privacy-oriented settings and limit theavailability of information – especially theinformation retrievable by search engines. Checkthe privacy settings for your profile – who cancontact you, who can read your postings, who canadd comments to your pages, what privileges applyto the users in your groups.

19

SPAM / UNSOLICITEDADVERTISING

Check how your personalinformation is used by yourservice provider. If you do notwish to get unsolicited ads,make sure you do not giveyour consent to the use of yourdata for purposes of targetedadvertising, promotionalinitiatives and/or marketing.

IDENTITY THIEVES

You might be chatting and sharing information with someonewho is not who you think they are. A child might be an adult,and vice versa. It is increasingly frequent that fake identitiesare created – whether of well-known characters or not – as a practical joke, for spite, or to get at confidentialinformation. It only takes your picture, some information on your life… and you might be the next “clone” on the list.

CONTRACT AND TERMS OF USE

Read carefully the contract and the terms of use you are accepting when you sign up to a social network. Check for any changes that maybe made unilaterally by the SNprovider. Check that you caneasily withdraw from the serviceand erase all the informationyou have posted on yourself.

Piazza di Monte Citorio, 12100186 RomaPhone: +39-06 696771 fax: +39-06 69677785

Contact: Ufficio per le relazioni con il pubblico (Front Desk)Mon-Fri 10-13Email: urp@garanteprivacy.it

Edited by Servizio relazionicon i mezzi di informazione (Media and Communications Service)at the Garante per la protezione dei dati personali

Ve

rti

go

De

sig

n

Francesco Pizzetti, PresidentGiuseppe Chiaravalloti, Vice-PresidentMauro Paissan, Member Giuseppe Fortunato, Member

Filippo Patroni Griffi, Secretary General

www.garanteprivacy.it