Published On: Wed, Apr 11th, 2018

Zuckerberg won’t give a true answer on information downloads

What does Facebook know about you? Clearly a whole lot some-more than it’s gentle vouchsafing on.

Today, during testimony in front of a House Energy Commerce committee, CEO Mark Zuckerberg was pulpy by congressman Jerry McNerney on either Facebook lets users download all their information — and he finished adult appearing to agreement a own cookies policy, that — if we go and indeed review it — states flattering clearly that Facebook harvests users’ browsing data.

See, for e.g.:

We use cookies if we have a Facebook account, use the Facebook Products, including a website and apps, or revisit other websites and apps that use a Facebook Products (including a Like symbol or other Facebook Technologies). Cookies capacitate Facebook to offer a Facebook Products to we and to know a information we accept about you, including information about your use of other websites and apps, either or not we are purebred or logged in.

Yet we won’t find your browsing information enclosed in a duplicate of a information we can ask from Facebook. Nor will we find a finish list of all a advertisers that have told Facebook they can aim we with ads. Nor will we find lots of other pieces of personal information like images that Facebook knows you’re in though that were uploaded by other users, or a phone series we declined to share with it though that was uploaded anyway since one of your friends synced their contacts with a apps, thereby handing your digits over though your contend so.

And that’s usually to name a few of a blank pieces of information that Facebook knows and binds about we — won’t tell we about if we ask it for a duplicate of “your information”.

Here’s a pivotal sell — that is value reading in full to see how delicately Zuckerberg worded his replies:

McNerney: “Is there now a place that we can download all of a Facebook information about me including a websites that we have visited?”

Zuckerberg: “Yes congressman. We have a download your information tool, we’ve had it for years, we can go to it in your settings and download all of the content that we have on Facebook.”

McNerney: “Well my staff, usually this morning, downloaded their information and their browsing story is not in it. So are we observant that Facebook does not have browsing history?”

Zuckerberg: “Congressman that would be correct. If we don’t have calm in there thereafter that means that we don’t have it on Facebook. Or we haven’t put it there.”

McNerney: “I’m not utterly on house with this. Is there any other information that Facebook has performed about me either Facebook collected it or performed it from a third celebration that would not be enclosed in a download?”

 Zuckerberg: “Congressman, my bargain is that all of your information is enclosed in download your information.”

McNerney: “I’m going to follow adult with this afterwards.”

If we review Zuckerberg’s answers delicately you’ll see that any time he reframes a doubt to only refer to information that Facebook users have themselves put on Facebook.

What he is positively not articulate about is a most some-more saturated — and roughly wholly secret — supermassive blackhole’s value of information a association itself amasses about users (and indeed, non-users) around a accumulation of on and offsite tracking mechanisms, including — outward a walled garden — cookies, pixels and amicable plug-ins embedded on third celebration websites.

According to pro-privacy hunt engine DuckDuckGo, Facebook’s trackers are on roughly a entertain of a tip million websites — definition that anyone browsing renouned websites can have their activity available by Facebook, related to their Facebook identity, and stored by a association in a immeasurable though secret particular profiling databases.

This credentials notice has got Facebook into authorised prohibited H2O with mixed European information insurance agencies. Albeit it hasn’t — so distant — stopped a association tracking Internet users’ habits.

The pivotal undo clear in Zuckerberg’s testimony is that Facebook thinks of this form of information (metadata if we prefer) as belonging to it — rather than to a people whose temperament is related to it (linking also conducted by Facebook).

Hence a apparatus Zuckerberg flagged in front of Congress is really deliberately called “download your information” [emphasis mine].

With that diction Facebook does not guarantee to give users a duplicate of any of a information it has pervasively collected on them. (Doing so would clearly be distant some-more expensive, for one thing.)

Although given that McNerney pulpy Zuckerberg in his follow adult for a specific answer on “any other information that Facebook has performed about me” — and a CEO still equivocated, it’s frequency a good look.

Transparency and plain traffic from Facebook? Quite a conflicting on this front.

Facebook has faced some-more vigour on a miss of clarity about a information it binds on users in Europe where existent remoteness regulations can charge that organizations contingency respond to ostensible ‘subject entrance requests’ — by providing people who make a ask with a duplicate of a information they reason about them; as good as (if they make a little payment) revelation them whether any personal information is being processed; giving them a outline of a personal data, a reasons it is being processed, and either it will be given to any other organizations or people.

So, in other words, theme entrance requests are a universe divided from Facebook’s stream ‘download your information tool’ — that usually shows users usually a information they have privately volunteered to give it.

Even so, Facebook has not been assembly a full avowal obligations set out in EU remoteness law — instead posterior authorised avenues to equivocate fulsome compliance.

Case in point: Late final month Paul-Olivier Dehaye, a co-founder of PersonalData.IO, told a UK parliamentary cabinet — that has also been job for Zuckerberg to attest (so distant unsuccessfully) — how he’s spent “years” perplexing to obtain all his personal information from Facebook.

Because of his efforts he pronounced Facebook built a apparatus that now shows some information about advertisers. But this still usually provides an eight-week image of advertisers on a height that have told it they have an individual’s agree to routine their information. So still a really distant cry from what people are ostensible to be means to ask underneath EU law.

“Facebook is invoking an difference in Irish law in a information insurance law — involving, ‘disproportionate effort’. So they’re observant it’s too most of an bid to give me entrance to this data,” Dehaye told a committee. “I find that utterly intriguing since they’re creation radically a technical and a business evidence for because we shouldn’t be given entrance to this information — and in a technical evidence they’re in a approach sharpened themselves in a foot. Because what they’re observant is they’re so vast that there’s no approach they could yield me with this information. The cost would be too large.”

“They don’t cost a cost itself,” he added. “They don’t contend it would cost us this most [to approve with a information request]. If they were starting to put a cost on removing your information out of Facebook — we know, each little indicate of information — that would be really engaging to have to review with smaller companies, smaller amicable networks. If we consider about how antitrust laws work, that’s a starting indicate for those laws. So it’s kind of mindboggling that they don’t see their argumentation, how it’s going to harm them during some point.”

With a incoming GDPR refurbish to a bloc’s information insurance laws — that beefs adult coercion with a new regime of supersized fines — a authorised liabilities of shirking regulatory correspondence will step adult neatly in usually over a month’s time. But it stays to be seen either Facebook — or indeed any of a other ad-tech giants whose business models rest on pervasive tracking of web users (ehem Google ehem) — will finally exhibit all a information hold on users, rather than usually giving adult a few resourceful snapshots.

About the Author

Leave a comment

XHTML: You can use these html tags: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>