Privacy Digest

Opt-in controls for allowing your info to be Exported - Via Marc's Voice:

The time is right for our industry to come up with a way for users to control their profile and social network data. Whether it be access control, exportability or even the right to have email sent to you - user’s need to be in control.

This whole Scoble affair has highlighted a necessity which I plugged awhile back - which is that we need - opt-in controls - that give every user the ability to control en masse (or maybe even on a case by case basis) - who can export their personal data (mainly email address) via a ‘friends list’ export.

This is what Robert Scoble was doing - utilizing a new Plaxo util which scraped Facebook and exported Robert’s friends list email addresses into Plaxo Pulse. Well what happened was that Facebook suspended Robert’s account - only to turn it back on later.

The whole scripts scraping sites thing is a no-no - and Facebook turned off Robert’s account to make that clear. But what this controversy highlights is an issue we brought up in our Bill of Rights for Users of Social Media.

Just who owns this data that is associated with one’s personal profile account?

The Scoble controversy exacerbated an issue which isn’t going to go away. Whether you believe people really want to move their data or just inter-operate between networks (as Dare Obasanjo differentiates) the political issue is “who owns the data in the first place?”

There are so many peripheral issues surrounding this basic premise - that lets leave it at “the vendors who have the data on their hard drives” - control the data - unless they do something otherwise. Mary Hodder changed her TOS for dabble - but I know of no other vendor, including Plaxo - who has matched Mary on that freedom she granted her customers.

Dave Winer brings up the issue of controlling exactly what we expose to who - which is what Hans-Peter Brondmo was talking about on our panel in Paris - last month.

And there are numerous arguments for and against Robert and Plaxo - ranging from wild support and enthusiastic embracing of the principles of users controlling their own data (”Should GMail, Yahoo and Hotmail block Facebook“), to out right admonishment and disgust (”Scoble: freedom fighter or data thief?“)

As usual there’s two sides to the story.

On one side is Facebook - which it says is ‘protecting the privacy of it’s users‘ by preventing folks access to the email addresses of their friends. At least the export of those email addresses - along with the ’social graph’ info that is inherent in one’s list of friends on Facebook. Many folks support this notion and defend Facebook for preventing this access.

On the other hand is Joseph Smarr, Robert, Michael Arrington and myself (and 100’s of others) wrote up a Bill of Rights for Users of Social Media in anticipating these very issues. We feel that Facebook does not own our data - we do. And by preventing services like Plaxo’s Export thingie/script from freely operating - they are breaking our Bill of Rights.

Facebook has been ‘hiding behind the shroud of privacy‘ for awhile now - but you can see that it’s not so simple as one of our co-authors (Arrington) says that Plaxo ‘flubbed it’.

What alternative did Plaxo have Michael?

The issue is the origin of all this user data. Clearly - as Kara points out - MOST - of Robert’s data is his own, but as Dare and others point out the email addresses in fact are the possession of the friend, not Robert. Robert’s right to have a copy of that email and to be able to easily contact that friend - is the question.

This is where an opt-in control would solve the problem.

Facebook and all social networks should build in a feature which empowers users to control whether or not their email (and other info) could be exported if they were on some friends list. So all of Robert’s 5,000 friends would have to opt-in to allow ‘exporting of their data’, before he could gain access to those email addresses.

THEN Facebook (and others) wouldn’t have a leg to stand on. By providing an explicit opt-in mechanism end-users would have to check “YES - I want to allow my email address to be exported inside of my friend’s lists of their friends“, which at that point who are YOU Mr. Social Network vendor - to prevent me from doing what my friend’s say is OK?

Now where’s your privacy’s claims?

If we had such an opt-in control and if it was agreed to between social network vendors - then we’d be there.

Certainly its a great day for Plaxo and DataPortability.org. I’m just not sure how fun it was for Robert. We’ll find out ‘on the bus’.

(Read Original Article - Via Marc's Voice.)