Whose data is it anyway?

21 Feb Whose data is it anyway?

BBC News, By Mark Ward, February 20, 2009
The row over the changes Facebook made to its terms has thrown the light on the rights people surrender when they sign up to use a website. It is likely though that until the row over Facebook’s Terms and Conditions went public, few people knew what rights sites claim over the content that their members upload and share. “Less than 25% of users are making a specific point of going to the privacy settings and making changes,” said Simon Davies, head of digital rights group Privacy International. Most, he said, are so keen to get using a site after registering that they do not take time to learn what will happen to any data that they are surrendering. Only later do they go back and adjust what happens to their data. “A lot of sites do have strong privacy controls,” said Mr Davies. Tweaking these settings can help cut down on how much of a person’s data is distributed. “It can make a difference,” said Mr Davies, “particularly if the default is set in terms of maximum information flow.” Blogger Amanda French looked through the pages where sites such as Facebook, MySpace, Flickr, YouTube and others spelled out their policies with regard to the data that members upload. Although the wording was different, she found that sites such as MySpace, Yahoo, Google and Twitter explicitly backed away from claiming ownership over uploaded content. A brief survey of Europe’s Top 5 social sites found a similar situation. The text of the terms available on the UK sites of Facebook, Bebo, MySpace, Friends Reunited and Windows Live all back away from claiming ownership. By contrast, she wrote, the changes Facebook made to its terms were “extraordinarily grabby and arrogant”. The fact that Facebook moved quickly to roll back to its original Terms and Conditions showed how much respect it has for online communities, said David Wood, a Brussels-based lawyer who represents web trade group ICOMP. “It shows the power of social networks when things go wrong,” he said. “They can push back.” What Ms French did find was that many sites grant themselves a perpetual licence to use the content, so they can scan what people post, such as pictures and messages, and then work out what it is and what adverts to run alongside it. However, this could change as in Europe moves are afoot to change the laws and guidelines which govern what websites can do with data and how long they can keep it. In late 2008, the Article 29 working group, which is re-drafting data protection legislation, said websites were breaking the law if they retained data longer than six months. While many firms have pledged to honour the six-month deadline none have done so because, so far, Google has declined to follow the Article 29 call. To do so, they said, would hand even more market power to Google which already dominates in Europe. Below are excerpts from the Terms and Conditions of Europe’s top five social sites.