engage emea 2010 - social media privacy

Privacy in Social MediaJustin Kistner, Sr. Mgr. of Social

Presenter: @justinkistner Hashtag: #wtengage

History repeating

Presenter: @justinkistner Hashtag: #wtengage

Not covering country issues

Presenter: @justinkistner Hashtag: #wtengage

Fundamental issues•Collection•Ownership•Usage•Reselling

Presenter: @justinkistner Hashtag: #wtengage

Is privacy realistic?

Presenter: @justinkistner Hashtag: #wtengage

Over-sharing

Presenter: @justinkistner Hashtag: #wtengage

What is Privacy?•Privacy isn't just about keeping things

secret, it's about respecting the context of communication and not pushing peoples' communication out of the context it was intended for. (Marshall Kirkpatrick)•The ability to control access to personal

information.

Presenter: @justinkistner Hashtag: #wtengage

Facebook Privacy

Presenter: @justinkistner Hashtag: #wtengage

Graph API

Presenter: @justinkistner Hashtag: #wtengage

Public data{ "id": "220439", "name": "Bret Taylor",

"first_name": "Bret", "last_name": "Taylor", "link": "http://www.facebook.com/btaylor", "gender": "male", "locale": "en_US" }

Presenter: @justinkistner Hashtag: #wtengage

Extended permissions

Presenter: @justinkistner Hashtag: #wtengage

Private data{ "id": "220439", "name": "Bret Taylor", "first_name": "Bret", "last_name": "Taylor", "link":

"http://www.facebook.com/btaylor", "hometown": { "id": "108363292521622", "name": "Oakland, California" }, "location": { "id": "109650795719651", "name": "Los Gatos, California" }, "work": [ { "employer": { "id": "20531316728", "name": "Facebook" }, "position": { "id": "128221557197084", "name": "CTO" }, "start_date": "2009-08", "end_date": "0000-00" }, { "employer": { "id": "107618122602757", "name": "FriendFeed" }, "position": { "id": "115097051838153", "name": "Founder & CEO" }, "start_date": "2007-10", "end_date": "2009-08" }, { "employer": { "id": "111122355573466", "name": "Benchmark Capital" }, "position": { "id": "108219395878755", "name": "Entrepreneur in Residence" }, "start_date": "2007-06", "end_date": "2007-09" }, { "employer": { "id": "104958162837", "name": "Google" }, "position": { "id": "110433382317858", "name": "Group Product Manager" }, "start_date": "2003-03", "end_date": "2007-06" } ], "education": [ { "school": { "id": "112075895485567", "name": "Acalanes High" }, "year": { "id": "116065551754246", "name": "1998" }, "type": "High School" }, { "school": { "id": "6192688417", "name": "Stanford University" }, "year": { "id": "115277555160546", "name": "2002" }, "concentration": [ { "id": "111986405495645", "name": "Computer Science" } ], "type": "College" }, { "school": { "id": "6192688417", "name": "Stanford University" }, "degree": { "id": "113118705373612", "name": "MS" }, "year": { "id": "116452021707539", "name": "2003" }, "concentration": [ { "id": "111986405495645", "name": "Computer Science" } ], "type": "Graduate School" } ], "gender": "male", "relationship_status": "Married", "significant_other": { "name": "Karen Padham Taylor", "id": "1138911382" }, "website": "http://bret.appspot.com/", "locale": "en_US", "updated_time": "2010-10-03T23:20:50+0000" }

Presenter: @justinkistner Hashtag: #wtengage

24 hour rule eliminated

Presenter: @justinkistner Hashtag: #wtengage

Don’t scrape the graph API

Presenter: @justinkistner Hashtag: #wtengage

Public•ID•Name•Locale

Public via Friends•ID•Name•Gender•Profile pic

Optionally Public via Friends•Bio•My videos•Birthday•My links•Family and relationships•My notes•Interested in and looking for•Photos and videos I'm tagged in•Religious and political views•Hometown•My website•Current city•If I'm online•Education and work•My status updates•Activities, interests, things I like•My photos

Optionally Public•Posts by me•Family•Relationships•Interested in and looking for•Bio and favorite quotes•Gender•Website•Religious and political views•Birthday•Videos•Photos•Photos and videos I’m tagged in•Events•Notes•Comments on posts•Friends can post on my wall•Can see Wall posts by friends•Mobile phone•Other phone•Address•IM screen name•Email addresses•Friend requests•Send me messages•Appear in search•Friend list•Current City and hometown•Interests and other Pages•Instant personalization•What apps you’re using•Game and application activity

Private•Messages

Facebook Privacy Bullseye

Presenter: @justinkistner Hashtag: #wtengage

Application Privacy Dashboard

Presenter: @justinkistner Hashtag: #wtengage

Avoidable mistakes•Support application deauthorization•Have a privacy policy•Don’t pass personally identifiable

information (PII) in the URL•Don’t share data you collect with 3rd

parties for their use•Don’t ask for extended permissions if

you don’t need them

Presenter: @justinkistner Hashtag: #wtengage

Privacy Outside of Facebook

Presenter: @justinkistner Hashtag: #wtengage

Twitter – Account settings

Presenter: @justinkistner Hashtag: #wtengage

Twitter – API access rules•No gathering data in order to resell it to

develop additional products and services•Need user permission to send tweets on

their behalf, modify their profile, or add elements to their tweets (such as hashtags)•Disclose what you are doing with info

gathered from users and/or adding location data •Do not facilitate or encourage the

publishing of private or confidential information

Presenter: @justinkistner Hashtag: #wtengage

YouTube – Account settings

Presenter: @justinkistner Hashtag: #wtengage

YouTube – Video settings

Presenter: @justinkistner Hashtag: #wtengage

YouTube – API access rules•Can access user profile data and their

contacts•No storing user data beyond a session•No sharing data with 3rd parties•No accessing info beyond what is

necessary for your app•Cannot use collected content to

personalize ads, messages, promotions, or offers

Presenter: @justinkistner Hashtag: #wtengage

LinkedIn – Account settings

Presenter: @justinkistner Hashtag: #wtengage

LinkedIn – App authorization

Presenter: @justinkistner Hashtag: #wtengage

LinkedIn – App authorization

Presenter: @justinkistner Hashtag: #wtengage

LinkedIn – API access rules•Can access user profile data and their

contacts•No storing user data beyond a session•No sharing data with 3rd parties•No accessing info beyond what is

necessary for your app•Cannot use collected content to

personalize ads, messages, promotions, or offers

Presenter: @justinkistner Hashtag: #wtengage

Handling a crisis•Hot list of issues•Crisis response team•Response plan•Sr. Communication Manager

Presenter: @justinkistner Hashtag: #wtengage

Questions?