Facebook Privacy Research Articles

페이스북 이용자의 개인정보 공개와 결정 요인

국내 대학생을 대상으로 페이스북의 개인정보 공개 현황을 살펴보고 개인정보 공개에 영향을 미치는 요인을 살펴보았다. 페이스북의 개인정보 공개 현황은 프로파일의 정보를 토대로 개인정보 공개여부와 공개 범위, 두 측면에서 분석됐다. 개인정보 공개에 영향을 미치는 주요 변인은 페이스북 프라이버시 염려, 사회적 관계 유지 동기 등이 고려됐으며 성별, 이용기간, 이용시간 역시 분석에 포함됐다. 서베이 분석 결과, 페이스북 프라이버시 염려는 이용자에 관한 프라이버시 염려, 시스템에 관한 프라이버시 염려로 구분됐으며 개인정보 공개와 공개범위를 각각 종속변인으로 하는 회귀분석을 실시하여 주요변인의 영향력을 분석했다. 연구결과, 개인정보 공개정도의 경우는 성별, 이용기간, 사회적 관계 유지 동기에 의해 설명되며 개인정보 공개 범위는 이용기간, 페이스북 이용자에 의한 프라이버시 염려에 의해 설명되는 것으로 관찰됐다. 흥미로운 분석 결과는 공개정도 분석결과에서 사회적 관계 유지 동기가 페이스북 시스템에 의한 프라이버시 염려보다 우선하는 것으로 관찰된 점이다. 이에 대한 함의를 실었으며 페이스북 국내 이용자의 개인정보 공개 현황을 공개정도와 공개범위에 따라 항목별로 분석해, 이용자의 개인정보 공개와 페이스북 이용을 통한 사회적 관계와의 관련성을 유추하고자 했다. This study analyzed the profile of a Facebook account to examine how personal information is revealed and what kinds of factors influence personal information revelation. Categories of user's profile on Facebook were analyzed and two dimensions were developed; the degree that how much personal information is revealed and the network limits that personal information is accessed. Main variables to determine personal information revelation are Facebook privacy concern and uses for social relationships along with gender, the duration of Facebook use, and average time of use. Data were collected from college students. Factor analysis produced two factors of Facebook privacy concern, Facebook privacy concern with users and Facebook privacy concern with the Facebook system. Regression analyses were performed to identify significant determinants of the degree of information revelation and the network limits of personal information. The results found out that the degree of personal information revelation is explained by gender, the duration of use, and use for social relationships while the network limit is explained by the duration of use and Facebook privacy concern with users. Worthy of notice is that use for social relationships and Facebook privacy concern with the Facebook system offset each other. The implications of the results are discussed. Additionally and finally the categories of profiles are graphically re-grouped to show how personal information revelation is associated with social relationship generation and maintenance.

The Privacy Paradox: A Facebook Case Study

The utility of social networks is contingent on information sharing, which constrains privacy. Engaging in online social networks is seen to indicate that the participants either do not care about privacy, do not understand the risks of information sharing, or find privacy controls to be unusable. Given the contextual nature of privacy all three models may exist in the population and in fact in a single person. We introduce the three distinct academic threads leading to each model, i.e. rational economics, risk behavior, and human computer interaction. Further, we conduct a survey based study to elicit the relative strengths of these explanations for information sharing on Facebook (n=384). Our findings indicate that while all three explanations are relevant, their relative strengths are different. The perceived risk of sharing information is the most important determinant of privacy behaviors; to a lesser extent usability of privacy controls is important. Finally, privacy preferences is the least important factor; thus, the explanation that people don’t care is weakest explanation of the privacy paradox (on Facebook).We argue that Facebook should invest in both more usable privacy controls and awareness of those controls. In general better controls and more information increased information sharing and lowered the perceptions of risk, thereby aligning expressed attitudes with observed behaviors and addressing the paradox. We note that privacy risks behaviors are determined by dread risk and familiarity on Facebook, as for risks offline. Thus, Facebook privacy efforts should leverage prior research in risk communication offline. Specifically, risk averse behaviors can be encouraged if risk communication focuses on severe, catastrophic, and rare consequences of information sharing.

Areas of Privacy in Facebook

Privacy issues surrounding the use of social media sites have been apparent over the past ten years. Use of such sites, particularly Facebook, has been increasing and recently business organizations have begun using Facebook as a means of connecting with potential customers or clients. Using a factorial design previously introduced by Martin (2010), this paper presents an empirical study of perceived privacy violations and their seriousness to examine factors that might influence the expectations of privacy on Facebook. Results of the study suggest that the more important Facebook is to users the more likely they are to perceive privacy violations and the more likely those violations are serious. Furthermore, how information is used is more important than the way this information is accessed.

Facebook Law and Privacy Issue in India

The purpose of this research is to identify the privacy issues of facebook and the Indian law of facebook. The first phase of the project involves the introduction of facebook, privacy issues and policy of facebook and then the second phase involves the law of facebook in India. In this we also discuss about the offences related to facebook and also about the punishment which comes under those offences, so by this users can know which type of content they can post, comment or message on facebook.

Friend or not to friend: Coworker Facebook friend requests as an application of communication privacy management theory

Given that Facebook.com is a social networking tool used by a diverse audience, this study employs Communication Privacy Management (CPM) theory as a framework to investigate how working professionals respond to co-worker Facebook friend requests. Overall, 312 individuals with full-time jobs and Facebook accounts completed an online survey. Results confirmed that most working professionals accepted co-worker Facebook friend requests. However, request decisions varied in conjunction with organizational privacy orientation, current Facebook privacy management practices, and co-worker communication satisfaction. Results confirm that working professionals’ Facebook linkage choices with other co-workers are best understood when embedded within a framework which provides a more complete understanding of the functioning of their privacy rules. Future research examining working professionals’ social media privacy management practices when individual privacy norms contradict organizational privacy norms is discussed.

Intimidad y «extimidad» en las redes sociales. Las demarcaciones éticas de Facebook

The current paper aims to analyze how certain Facebook settings, model of new Information and Communication Technologies (ICT), have turned into an infringement of some existing privacy Ethical principles. This totally changed and modern paradigm has its clearest expression in recent Web 2.0., and omnipotent Communication Technology, and implies the reconsideration of each Ethical Principles, especially those related to Intimacy and Image Protection. Our research explains not just how these areas are affected by technological changes but also the way these imperative ethical principles are violated because users ignorance and confidence. This carefree attitude and the increasing communicative relevance have given networking precedence over Intimacy protection. The result of this action has been denominated «Extimacy» according to the author Jacques Lacan, a concept which can be translated as public Intimacy through networking activities, namely, exposed Intimacy. The goal we aim to achieve is to illustrate the different ways our Privacy can be damaged by some Facebook measures (as Privacy Policies Change, collecting tendencies of consumption, the use of private data and revealing users confidence). Likewise these arguments will be endorsed by international researches focused on Facebook privacy violations, which we are going to expose to understand how citizens can carry out different actions to defend our Intimacy and Image Rights. El presente trabajo analiza cómo ciertas herramientas de Facebook, modelo de las nuevas tecnologías de la información, han derivado en la vulneración de algunos planteamientos éticos vigentes hasta el momento. Este paradigma comunicativo que encuentra su máxima expresión en las redes sociales y la tecnología 2.0, implica un replanteamiento de los principios de la ética informativa relativos a la salvaguarda de la intimidad, la protección de la vida privada y el resguardo de la propia imagen. Esta investigación estudia cómo estas áreas no solo se ven afectadas por los cambios tecnológicos y la propia naturaleza de la fuente informativa, sino por la confianza y desconocimiento de los usuarios, quienes dan primacía a la comunicación por encima de la intimidad. Este fenómeno denominado «extimidad» por Jacques Lacan, se traduce como la intimidad hecha pública a través de las nuevas redes de comunicación o intimidad expuesta. En nuestro análisis expondremos los resortes a través de los cuales se quebranta nuestra privacidad en Facebook, especialmente por medio de la captación de pautas de comportamiento, el empleo de datos derivados de los perfiles, los cambios en la política de privacidad y el reconocimiento facial, avalando su transgresión con documentación derivada de investigaciones realizadas por organismos internacionales. En resumen, analizar la vulneración de la intimidad en las redes sociales y entender qué medidas pueden implementarse para defender nuestros derechos son el objetivo de esta comunicación.

Don't It Make My Brown Eyes Green? An Analysis of Facebook Use and Romantic Jealousy

Social networking Web sites, such as Facebook, have changed the way in which people communicate online. The present study examined the relationship between jealousy and Facebook use experimentally by asking participants to imagine viewing their romantic partner's Facebook page. We varied the hypothetical privacy settings and number of photos of the couple publicly available on Facebook. Results indicated that imagined privacy settings and the presence of couple photos affected negative emotions (jealousy, anger, disgust, and hurt). Furthermore, we found sex differences indicating that women felt more intense negative emotions after thinking about the fictitious scenario than did men, particularly when evidence of infidelity was public to others. These results have implications for sex differences in jealousy and suggest that the manner in which people employ Facebook privacy settings can be negative for romantic relationships.

Areas of privacy in Facebook - expectations and value

Privacy issues surrounding the use of social media sites have been apparent over the past ten years. Use of such sites, particularly Facebook, has been increasing and recently business organizations have begun using Facebook as a means of connecting with potential customers or clients. Using a factorial design previously introduced by Martin (2010), this paper presents an empirical study of perceived privacy violations and their seriousness to examine factors that might influence the expectations of privacy on Facebook. Results of the study suggest that the more important Facebook is to users the more likely they are to perceive privacy violations and the more likely those violations are serious. Furthermore, how information is used is more important than the way this information is accessed.

Privacy by Design: A Counterfactual Analysis of Google and Facebook Privacy Incidents

Regulators here and abroad have embraced “privacy by design” as a critical element of their ongoing revision of current privacy laws. The underlying idea is to “build in” privacy— in the form of Fair Information Practices or (“FIPs”)—when creating software products and services. But FIPs are not self-executing. Rather, privacy by design requires the translation of FIPs into engineering and usability principles and practices. The best way to ensure that software includes the broad goals of privacy as described in the FIPs and any related corporate privacy guidelines is by including them in the definition of software “requirements.” And a main component of making a specification or requirement for software design is to make it concrete, specific, and preferably associated with a metric. Equally important is developing software interfaces and other visual elements that are focused around end-user goals, needs, wants, and constraints. This Article offers the first comprehensive analysis of engineering and usability principles specifically relevant to privacy. Based on a review of the technical literature, it derives a small number of relevant principles and illustrates them by reference to ten recent privacy incidents involving Google and Facebook. Part I of this Article analyzes the prerequisites for undertaking a counterfactual analysis of these ten incidents. Part II presents a general review of the design principles relevant to privacy. Part III turns to ten case studies of Google and Facebook privacy incidents, relying on the principles identified in Part II to discover what went wrong and what the two companies might have done differently to avoid privacy violations and consumer harms. Part IV of the Article concludes by arguing that all ten privacy incidents might have been avoided by the application of the privacy engineering and usability principles identified herein. Further, we suggest that the main challenge to effective privacy by design is not the lack of design guidelines. Rather, it is that business concerns often compete with and overshadow privacy concerns. Hence the solution lies in providing firms with much clearer guidance about applicable design principles and how best to incorporate them into their software development processes. Regulators should provide greater guidance on how to balance privacy with business interests, along with appropriate oversight mechanisms. © 2013 Ira S. Rubinstein & Nathaniel Good. † Adjunct Professor of Law and Senior Fellow, Information Law Institute, New York University School of Law. †† Principal, Good Research LLC. This Article was presented at the NYU Privacy Research Group and at the 2012 Privacy Law Scholars Conference, and we are grateful for the comments of workshop participants. Ron Lee, Paul Schwartz, and Tal Zarsky provided valuable suggestions on an earlier draft. Thanks are also due to Jeramie Scott and Mangesh Kulkarni for excellent research assistance and to Tim Huang for his help with citations. A grant from The Privacy Projects supported this work. 1334 BERKELEY TECHNOLOGY LAW JOURNAL [Vol. 28:1333

Privacy by Design: A Counterfactual Analysis of Google and Facebook Privacy Incidents

Regulators here and abroad have embraced “privacy by design” as a critical element of their ongoing revision of current privacy laws. The underlying idea is to “build in” privacy (in the form of Fair Information Practices or FIPs) when creating software products and services. But FIPs are not self-executing. Rather, privacy by design requires the translation of FIPs into engineering and usability principles and practices. The best way to ensure that software includes the broad goals of privacy as described in the FIPs and any related corporate privacy guidelines is by including it in the definition of software “requirements.” And a main component of making a specification or requirement for software design is to make it concrete, specific and preferably associated with a metric. Equally important is developing software interfaces and other visual elements that are focused around end-user goals, needs, wants and constraints. The Article offers the first comprehensive analysis of engineering and usability principles specifically relevant to privacy. Based on the relevant technical literature, it derives a small number of relevant principles and illustrates them by reference to ten recent privacy incidents involving Google and Facebook. The Article concludes that all ten privacy incidents might have been avoided by the application of these privacy engineering and usability principles. Further, we suggest that the main challenge to effective privacy by design is not the lack of design guidelines. Rather, it is that business concerns often compete with and overshadow privacy concerns. Hence the solution lies in providing firms with much clearer guidance about applicable design principles and how best to incorporate them into their software development processes. Greater guidance is also needed for how to balance privacy with business interests, and there must be oversight mechanisms as well.

WHATS IN YOUR PROFILE? MAPPING FACEBOOK PROFILE DATA TO PERSONAL SECURITY QUESTIONS

This study investigates data privacy concerns regarding the use of Facebook and university students’ awareness of privacy control mechanisms, privacy best practices, and possible consequences of unprotected information-sharing in Facebook. Research found that students share a large quantity and variety of personal data in their Facebook profiles that, if compromised, could be used by an attacker to answer personal security questions setup as fallback authentication methods for other online accounts. The consequences of this type of data breach could include unauthorized bank account access, identity theft, or other crimes. Results suggest that students are generally unaware of best practices for data protection within Facebook, and often misuse available privacy control mechanisms. The researchers conclude by offering a set of best practices Facebook users can follow to help protect data privacy in Facebook.

Disclosing Personal Data Socially — An Empirical Study on Facebook Users' Privacy Awareness

Maintaining existing relationships and present oneself to others is easy and inexpensive in social network services, such as Facebook. Nevertheless, the ever-increasing amount of personal data in these online services gives a rise to privacy concerns and risks. In an attempt to understand the factors, especially privacy awareness, that influence users to disclose or hide information in online environment, we view privacy behavior from the perspectives of privacy protection and information disclosing.Our survey of 210 Facebook users indicates, that most active users of this social network service disclose a considerable amount of private information. Contrary to their own beliefs, they are not too well aware of the visibility of their information to people they do not necessarily know. Furthermore, Facebook's privacy policy and the terms of use are largely either not known or understood. With the proliferation of different social media tools and services and the increased interest and involvement of companies and other organizations, understanding users' privacy attitudes and behavior becomes of paramount importance.

Facebook and User-Controlled Privacy: Evaluating Privacy Settings as Notice-and-Consent

“Notice and consent” is a widely-used model of privacy protection that relies on users’ ability to interpret an organization’s written description of its information practices through a privacy policy and choose whether to participate. In the past, organizations using this model have fallen under harsh criticism for providing long, legalistic notices and confusing, unclear choices. In the past few years, Facebook has sought to address these issues through privacy settings such as the “Privacy Publisher tool.” These mechanisms are new and untested, but they could potentially vindicate notice-and-consent by using graphics, metrics and other mechanisms to better inform and facilitate privacy decisions. The study will test the efficacy of these mechanisms for providing appropriate protection. In doing so, it will evaluate their feasibility as a model for notice and consent. To conduct this evaluation, the thesis will conduct a behavioral survey of how site visitors use these settings to understand their privacy risk and make decisions based on personal preferences. The study hypothesizes that, while privacy settings may provide some protection, they leave most users unprotected from many significant privacy harms. The survey itself will consist of three sections. The first section will test respondents’ ability to use the privacy settings to protect against specific harms. The survey will present the respondents with the mock privacy pages and prompt them to choose settings in response to a privacy issue. One prompt may be: “Choose Facebook settings that would only allow friends to tag photos of you.” The results could indicate whether the settings discourage certain kinds of protections, such as content sharing restrictions on Facebook. The second section will examine how respondents currently apply their privacy preferences on Facebook. Respondents will begin by submitting their Facebook privacy settings via multiple choice answers. Respondents will then answer questions about their preferences for each privacy practice. This section will permit the study to compare users’ opinion on the issues with how they actually selected their settings and will be an important indicator for evaluating the privacy settings. Finally, the third section will collect information of demographics and Facebook usage, such as how often a user checks Facebook for updates or posts to his or her wall. The final report will include a statistical analysis of these results and an examination of the conclusion. The study will conduct an analysis of variance, for instance, to understand how significant the gaps were between respondents’ selected settings and the settings that actually protect their preferences. The study will also employ regression techniques to understand which privacy settings face similar usability obstacles and which demographics face greater risks to privacy. David Krone is a recent graduate of Georgetown University’s Communications, Culture and Technology Program. David conducted research on Facebook Privacy as part of his thesis, with Georgetown Professors Mark MacCarthy and Diana Owen as advisors. In addition, David works full time as a Cybersecurity and Privacy Analyst at the Office of Personnel Management where he holds several privacy-related responsibilities. These include assessing IT system security risks to conducting system privacy threshold analyses (PTAs) and compiling reports on breaches involving personally identifiable information (PII). David holds the certification for the CIPP/G (Certified Information Privacy Professional – Government). Finally, as a Georgetown undergraduate, David studied the intersection of society and information and communications technologies by majoring in Science, Technology and International Affairs and minoring in Computer Science.

The Effects of a Social Media Policy on Pharmacy Students’ Facebook Security Settings

To examine how students entering a doctor of pharmacy (PharmD) program used Facebook privacy settings before and after the college's social media policy was presented to them. The Facebook profiles of all entering first-year pharmacy students across 4 campuses of a college of pharmacy were evaluated. Ten dichotomous variables of interest were viewed and recorded for each student's Facebook account at 3 time points: before the start of the semester, after presentation of the college's social media policy, and at the end of the semester. Data on whether a profile could be found and what portions of the profile were viewable also were collected. After introduction of the policy, a significant number of students increased their security settings (made information not visible to the public) related to Facebook walls, information pages, and links. Making pharmacy students aware of a college's social media policy had a positive impact on their behaviors regarding online security and privacy.

Hacker Literacies: Synthesizing Critical and Participatory Media Literacy Frameworks

Technology use is increasingly characterized by both critical mindsets and participatory practices. Yet, our current media literacy frameworks, critical media literacy and participatory media literacy, fail to account for and understand the nature of these practices because they are happening in situ. Arguing that these frameworks might be synthesized to understand emergent online practices, this article introduces the notion of hacker literacies: empowered participatory practices, grounded in critical mindsets, that aim to resist, reconfigure, and/or reformulate the sociotechnical digital spaces and tools that mediate social, cultural, and political participation in the 21st century. The article grounds this concept in a number of recent cases, including the Arab Spring and Occupy Wall Street movements, the creation of the hashtag on Twitter, and public reactions to Facebook's privacy policy changes. These examples illustrate the ways users of new media do not take for granted the design of these new mod...

Editorial: In This Issue

This issue of the Journal of Privacy and Confidentiality focuses on privacy in com- mercial and public data. Issues regarding the privacy of data collected online and from mobile devices appear in the news almost daily. As Facebook has grown to encompass almost 600 million users, its privacy settings and policies have come under consider- able scrutiny. For an excellent graphical characterization of Facebook privacy we refer our readers to http://www.mattmckeon.com/facebook-privacy/ . Similarly, revelations regarding how Apple iPhones and Google Android phones have kept logs of users' precise location information have raised major concerns about privacy of individual information

Teaching and Learning Guide for: New Media, Web 2.0 and Surveillance

The Internet has become part of our everyday lives. Many of us use it for work, hobbies, entertainment, politics, staying in touch with friends and family, learning to know new people and other cultures, for getting all kind of information, etc. In the past 10 years, we have seen the emergence of platforms like Facebook and Myspace (social networking sites), Wordpress and Blogger (blogging) Twitter (social networking, microblogging), YouTube (video sharing), Wikipedia (wiki-based encyclopaedia), or the Pirate Bay (filesharing index site). The notions of ‘web 2.0’ and ‘social media’ have been used by some scholars to describe features of such sites such as community-building and maintenance, continuous communication, user-generated content production and diffusion, collaborative authoring, and distributed content classifications (the latter mechanism is also called folksonomy). Most web 2.0 platforms collect, store, and share a lot of personal user data and data about usage behaviour. Therefore, questions about privacy violations and online surveillance have arisen in public discussions, especially concerning Google (for example the discussions about Google targeted advertising, Google Street View, Google Buzz, etc.) and Facebook (for example the discussions concerning Facebook targeted advertising, Facebook beacon, the Facebook privacy policy, Facebook places, etc.). The field of web 2.0 surveillance studies critically asks questions about the data protection aspects and power dimensions of the contemporary Internet. It is crucial for students and scholars, who are interested in the contemporary media landscape, and who study in fields such as media ⁄ communication studies, cultural studies, political science, law, computer science, social informatics, information science, sociology, business studies, advertising, marketing and public relations, philosophy, ethics, science and technology studies etc., to also engage with web 2.0 surveillance studies.

Weapons of Mass Assignment

In May 2010, during a news cycle dominated by users’ widespread disgust with Facebook privacy policies, a team of four students from New York University published a request for $10,000 in donations to build a privacy-aware Facebook alternative. The software, Diaspora, would allow users to host their own social networks and own their own data. The team promised to open-source all the code they wrote, guaranteeing the privacy and security of users’ data by exposing the code to public scrutiny. With the help of front-page coverage from the New York Times, the team ended up raising more than $200,000. They anticipated launching the service to end users in October 2010.

Moving from opt-out to opt-in? Online information disclosure and privacy policies in an era of personalisation

The advent of social networks has led to new questions in the area of privacy. Facebook continuously works on its privacy control panel to help simplify its notoriously confusing privacy options. However, organisations have criticised Facebook's approach to privacy, namely providing its members with opt-out choices. Why is Facebook forcing members to deny permission after sharing personal information with third parties, rather than asking explicit consent in advance? We examine this question from an integrated social scientific and legal approach by elaborating Facebook's privacy policy and by using the results from the research project 'Cultural Profile and Information Database' (CUPID).

Facebook privacy settings: Who cares?

With over 500 million users, the decisions that Facebook makes about its privacy settings have the potential to influence many people. While its changes in this domain have often prompted privacy advocates and news media to critique the company, Facebook has continued to attract more users to its service. This raises a question about whether or not Facebook's changes in privacy approaches matter and, if so, to whom. This paper examines the attitudes and practices of a cohort of 18- and 19-year-olds surveyed in 2009 and again in 2010 about Facebook's privacy settings. Our results challenge widespread assumptions that youth do not care about and are not engaged with navigating privacy. We find that, while not universal, modifications to privacy settings have increased during a year in which Facebook's approach to privacy was hotly contested. We also find that both frequency and type of Facebook use as well as Internet skill are correlated with making modifications to privacy settings. In contrast, we observe few gender differences in how young adults approach their Facebook privacy settings, which is notable given that gender differences exist in so many other domains online. We discuss the possible reasons for our findings and their implications.