Australian privacy commissioner warns Facebook over user information

The Australian privacy commissioner is investigating a report on alleged privacy breaches by social networking site Facebook, after her Canadian counterpart accused the site of keeping users’ information even after they have closed their accounts.

Canadian commissioner Jennifer Stoddart released a report that alleged Facebook disclosed user information to developers who create applications for the site, and said it did not introduce proper initiatives to protect personal information.

She said that, “it’s clear that privacy issues are top of mind for Facebook, and yet we found serious privacy gaps in the way the site operates”.

Australian commissioner Karen Curtis has made a similar statement, saying her office is studying the report, and noted that some of its concerns could apply within Australia.

“A number of the privacy issues raised by the Canadian Privacy Commissioner could arise under the Australian Privacy Act. For example, indefinite retention of personal information (after a user has deactivated their account) could be contrary to National Privacy Principle 4.2 of our Act, which requires that organisations take reasonable steps to destroy or permanently de-identify personal information it no longer has any lawful use for.”

“I would therefore encourage Facebook and other social networking sites to assess their practices against the national privacy principles in the Australian Privacy Act. This would be good practice whether or not they have formal obligations under the Act.”

Curtis said it is in the “nature” of social networking sites that privacy risks are prevalent, but warned social networks to introduce safeguards for private data.

“The sites should also play an active role in protecting the information of their users. The issues raised by the Canadian Privacy Commissioner regarding some of Facebook’s practices provide a good opportunity for Facebook to review and strengthen its information handling practices.”

“I look forward to seeing how Facebook responds to the issues raised by the Canadian Privacy Commissioner.”