By now, stories about social media website users revealing too much about themselves on their personal sites are widespread—from disgruntled employees getting into trouble for tweeting their dissatisfaction with their jobs to entire websites devoted to mocking parents’ inappropriate Facebook posts about their children. But according to the Federal Trade Commission (FTC), lately it’s the social media website operators themselves who have been oversharing. Over the past two years, many of the major players in social networking have entered into agreements with the FTC in order to ensure compliance with federal law (and the sites’ own published privacy policies) regarding maintaining the privacy of user information. Many of the problems have stemmed from the sites’ sales of user information to advertisers.
The most recent site to enter into such a proposed agreement is Myspace. The FTC alleged that Myspace had breached its own user privacy policy, which promised that the site would not share site users’ information (including tracking of other websites users visited) with advertisers. Specifically, the FTC claimed that Myspace had transmitted users’ internal identification numbers, ages and genders to advertisers in violation of a privacy policy promising users that Myspace would not share personally identifiable information with third parties unless the user had authorized Myspace to do so. Although Myspace did not admit liability in agreeing to the settlement with the FTC, it has agreed to submit to biannual audits of its practices for the next 20 years. In a statement, Myspace, which was acquired by California-based advertising group Specific Media and musician Justin Timberlake in June 2011, reiterated its commitment to ensuring users’ privacy in the wake of the acquisition, and noted that much of the conduct at issue had occurred prior to the acquisition. The settlement agreement still must be formally approved by the FTC, and will remain open for public comment until June 8, 2012.
Myspace is not the first, and may not be the last, social media site to enter into a user privacy-related settlement with the FTC. In November, 2011, Facebook entered a similar agreement, with the same 20 year biannual audit schedule. Google also agreed to similar reviews following the FTC’s concerns over user privacy relating to Google Buzz. In 2010, Twitter entered into a ten year audit agreement.
Although the audit schedule may appear burdensome, the threat of legislation relating to formal privacy policies has in many cases been sufficient to encourage agreements for self-policing privacy policies between social media sites and the FTC. However, regardless of the sites’ willingness to compromise with the FTC, social media consumer privacy legislation may still be on the horizon—an FTC report issued in March 2012 recommended that Congress enact privacy legislation, and the Obama administration also proposed a consumer privacy plan in February. Irrespective of the policing method used, however, it is clear that social media privacy is a matter of increasing concern to the FTC, and it’s no longer just the social media users who should be concerned about what they share.
This publication is intended for general information purposes only and does not and is not intended to constitute legal advice. The reader must consult with legal counsel to determine how laws or decisions discussed herein apply to the reader’s specific circumstances.
Sources:
Edward Wyatt, New York Times, “F.T.C. Charges Myspace With Breaking U.S. Law in Sharing Users’ Personal Information,” May 8, 2012, available at http://www.nytimes.com/2012/05/09/technology/myspace-agrees-to-privacy-controls.html.
Jasmin Melvin, Thomson Reuters News & Insight, “Myspace Settles FTC Charges Over Privacy,” May 8, 2012, available at http://newsandinsight.thomsonreuters.com/Legal/News/2012/05__May/Myspace_settles_FTC_charges_over_privacy/




