Social Web privacy: A new kind of social contract we're all signed onto

1993: In a famous New Yorker cartoon, a dog at a computer says to his canine buddy looking up from the floor, "On the Internet, nobody knows you're a dog." Fast-forward 13 years....

2006: "On the Internet, everybody knows you're a dog," declares the subhead to a Michael Kinsley essay in which he wondered at how narcissistic the social Web was (before it became a cliché). Fast-forward only four years this time....

2010: Although Internet industry CEOs have recently declared the death of privacy (see security expert Bruce Schneier's blog), "privacy is not dead," said social media researcher danah boyd in her keynote at the SXSW conference in Austin last month. "People of all ages care deeply about privacy. And they care just as much about privacy online as they do offline.... Wanting privacy is not about needing something to hide. It’s about wanting to maintain control."

Furthermore, boyd said, privacy and publicity are a mashup. Web meets reality. We all intuitively know there are many gradients between totally private and totally public – some people online know you're a dog, some don't; the numbers vary, based on how you use the Web, who you are, and how you live your life. The Web increasingly mirrors all of "real life." Technology didn't just start interacting with user privacy. Remember "Don't tell anyone who calls that your mom and dad aren't home"? "Will I sound too eager if I pick up after one ring?" Or even: "Who will see me reading this radical book?" Buzz, email, Facebook chat, tweets, texts, etc. are used in the contexts of our real-life relationships and situations just as much. Which is why it's absurd to think privacy is dead, or ever will be.

"Think about a cafe that you like to visit," said boyd. Compare your Facebook page to that public space in real life. "There's a possibility that you’ll intersect with all sorts of different people, but there are some people who you believe you are more likely to interact with than others. You have learned that you're more likely to run into your neighbors and you'd be startled if your mother popped in, since she lives 3,000 miles away. You may have even chosen this particular cafe in the hopes of running into that hottie you have a crush on or avoiding your ex who lives in a different part of town. You have also come to understand that physics means that there's a limit on how many people will be in the cafe. Plus, you'd go completely bonkers if, all of a sudden, everyone from your childhood magically appeared at the cafe simultaneously. One coincidence is destabilizing enough; we can't really handle a collapse in the time-space continuum."

The difference between my old landline and book examples and today's media and communications environment is the speed at which we communicate and socialize and the speed at which new technologies and products become available (the latter are digital, so they can be made available to all users simultaneously and globally within seconds). So we need to think carefully and a lot – in proportion to the speed of technological change, I'd say.

Who needs to think carefully and a lot? Everybody involved, together not in silos – users, companies, educators, policymakers. But let's just consider the two most important stakeholders, which – in the current new user-driven media environment – are really parties to a new, global social contract that's emerging right now, one that I think Secretary of State Hillary Clinton spoke to in her 21st-Century Statecraft" speech early this year. Those two parties are:

1. Internet industry, users are unprecedentedly your bread and butter. They supply all the "content" on your services. You need to bake consideration of the privacy and safety impacts of their doing so into your product development. For example, when you mash services up together, such as email and social-network updates, you need to think about how one tool is very private and the other very public. People use them differently. So combining people's email address books and social-network friends lists instantly without preparing them can create a lot of cognitive dissonance and bad will. "In digital worlds, people need to be eased into a situation, to understand how to make sense of the setting," boyd said. Companies need to poll their users or at least do focus groups before they make significant changes to the user experience, and after product or feature release, do more consumer education.

Users & providers are "dance partners." "When you moved from Web1.0 to Web2.0," boyd said to "the technologists in the room," "you moved from thinking about designing and deploying software to creating living code. You learned to dance with your users, to evolve with them." That's a powerful metaphor: Social-media companies and users are dance partners like never before. Users are much more than mere customers or consumers, and they may increasingly exercise that inherent power.

2. Users, we don't need to become conspiracy theorists, but we need to be serious about paying attention to our privacy settings – and go over them each time our favorite social tools announce a new social feature (such as Facebook's just-announced new Like button and Instant Personalization). Consumer awareness and self-protection are essential to exercising our power in a user-driven or participatory media environment.

Parents and teachers, kids know they don't want others to have power over them. Help them see that that's what privacy settings are about – having control over their own information and public image. When it's put this way, they know they don't want to let peers, companies, or anyone else do whatever they want with their info, reputations, and digital creations. You can help them see a) that it's reciprocal: their friends feel the same way – privacy and safety are necessarily collaborative in this media environment (see this); and b) that honoring this new reality is protective to all concerned – oneself, one's friends, one's community, and ultimately society. It's all interconnected and interdependent now. Mindful, collaborative behavior is baseline online and cellphone safety as well as privacy (see "Social norming: *So* key to online safety" and "From users to citizens").

Other key points in boyd's talk:

PII and PEI are intermeshed. We hear a lot about personally identifiable information (PII) but not as much about personally embarrassing information (PEI), which is every bit as important to users. Boyd said: "Because most people are interacting online with people they know, they expect to make PII available. They do so because they want to be found by friends. But they also want to keep PEI hidden, at least to those that might go out of their way to use it maliciously. Unfortunately, it's hard to be visible to some and invisible to others." The reality online as well as offline, she said, is that "when people make information available, they make themselves vulnerable." Product developers need to think about that as much as users.

It's complicated, like life. "Just because something is publicly accessible doesn't mean people want it to be publicized," boyd said. Adults, such as Slate's Kinsley, often conflate the two when they talk about the "solipsistic social Web." They're forgetting to ground social-media use in real life, instead somehow thinking technology is layered on top of life as an add-on. For example, you're "publicly accessible" to others when you're at Starbucks, but you're probably not publicizing your presence, though there are times when you might. You might sometimes use Foursquare so that everybody who follows you on Twitter knows you're there. But the reasons for that aren't necessarily narcissism but maybe rather hoping your local friends notice your shoutout and meet you there or, since Foursquare's a game you play, you may be aiming to become "mayor" of that Starbucks. You're probably not thinking that there's a slim chance a burglar is following you on Twitter and – noting that you're at Starbucks – robs your house, which is why social-media companies need to help educate users about that very slim possibility. Digital media use is about as complicated, changeable, and individual as living.

No magic formula. "Unfortunately, online environments are not nearly as stabilized as offline ones. While the walls in the streets may have ears, digital walls almost always do," boyd said. The environments (Twitter, Facebook, etc.) aren't stable, nor is our use of them. There's little common sense around their use yet, like the old "Don't let anybody know Mom and Dad aren't home" – though most youth privacy features in social network sites (see this). "There's no magical formula ... no easy algorithm to implement. Privacy and publicity are living things.... They are fundamentally processes grounded in needs, desires, and goals, situated in contexts and transformed by technology." Of course some needs and rights haven't changed, such as constitutional and legal ones for Internet users and providers in each country, though laws need to embrace and adjust to new-media conditions.

Because privacy's a living thing that's functioning in a new, rapidly evolving media environment, everyone's a stakeholder in supporting it. We need to 1) stay informed and help our children see the importance of doing so and 2) keep revisiting our privacy settings in light of new conditions. Companies need to keep thinking about the impacts on users of the new conditions, bake that thinking into the products they create, and educate users about new conditions. Policymakers need to understand that 1) users want both privacy and publicity as well as the means to calibrate them and 2) need education as much as tools for intelligent privacy management. And we all need to see that – because of the unstable, collaborative nature of everybody's wellbeing in digital media – privacy and safety are an ongoing negotiation, not a one-size-fits-all, once-and-for-all solution.

So I'd like to hear from you: Do you see it this way too, that a new kind of (multi-party) social contract is now in place, not imposed on us by any single power-holder but by changing conditions in which we are all invested (the social Web, or a user-driven, social/behavioral media environment )? If so, it seems to me that, under this contract, it benefits all parties not only to protect their own interests but to understand those of all other parties and protect them too. Otherwise, misguided "solutions," bad laws and lawsuits, and other signs of dysfunction will continue to distract us from hammering out real solutions together. Sorry to end on such a negative note, but that's what I see. Tell me what you see – via anne[at]netfamilynews.org, in this blog, or in the ConnectSafely forum!

Important related links

"Youth, Privacy & Reputation" by Alice E. Marwick, Diego Murgia, Diaz, John Palfrey, and the Youth and Media Policy Working Group Initiative – a thorough review of research on the subject which has been published in the US, Canada, the UK, and the EU (released 4/12/10)

"How Different are Young Adults from Older Adults When it Comes to Information Privacy Attitudes and Policies?" (released 4/14/10), by Chris Jan Hoofnagle, Jennifer King, Su Li, and Joseph Turow. Their conclusion: "that young-adult Americans have an aspiration for increased privacy even while they participate in an online reality that is optimized to increase their revelation of personal data.... Public policy agendas should therefore not start with the proposition that young adults do not care about privacy and thus do not need regulations and other safeguards. Rather, policy discussions should acknowledge that the current business environment along with other factors sometimes encourages young adults to release personal data in order to enjoy social inclusion even while in their most rational moments they may espouse more conservative norms."

Security expert Bruce Schneier blogging about both of the above 2 surveys

Consumer privacy experts: the Center for Democracy & Technology and the Future of Privacy Forum

"Young Adults Do Care About Online Privacy" in the Washington Post

"Keeping Personal Info Private," one of 8 lessons from Cablevision's "Power to Learn" project for grades 4-8 (thanks to educator Anne Bubnic for pointing this out)

Better teen privacy in Google's Buzz

Google's Buzz, which makes its Gmail much more social, didn't get off to a great start, where kids' privacy was concerned. But Google has made serious strides toward fixing that, and the "Buzz Teen Safety Tips" video it just put on YouTube takes 2 minutes to show you what I mean. If your teens are using Buzz (the minimum age is 13, as with most social Web services), you might watch the video to see if there are privacy features you'd like to talk with your kids about. The five key points are 1) they can choose to make only their first and last name visible on the public profile they have to set up to use Buzz (they don't have to include a photo), 2) whatever they post is not only visible to all their followers but could also appear in Google search results; 3) BUT they can edit and delete their own posts, delete any comments on their posts, and delete comments they've made on other people's posts; 4) Buzz sends them an alert whenever someone starts following them, and they can choose to block that person (it's good to know that Buzz doesn't let the person know if they do block him or her); and 5) they can disable Buzz altogether or hide it in Gmail but still use it on their phones. Here's my last post on Buzz and a little more detail on the subject from my ConnectSafely co-director Larry Magid at CNET.

Foursquare & other geolocation apps: For young adults, not kids

More and more, I'm seeing tweets about people becoming mayors of coffee shops in my Twitter stream. They're playing Foursquare on their phones, which pushes their "checkins" or location disclosures out to their Twitter followers. Foursquare is part cellphone social-mapping game, part Yelp (another way to find food, drink, or friends using your phone's geolocation technology). "A large number of foursquare users send their checkins to Twitter and/or Facebook, and therefore make their location available to an audience much larger than just their foursquare friends," says Foursquare. It's not for everybody. Someone over at eModeration in the UK (a company that helps keep kids safe in virtual worlds) thinks it's kind of dumb. It's really not for children. But there's a safer way to play it, if they insist. If yours do, ask them not to use their real photo; you don't want them identified by their photo in shops or restaurants where they "check in." They can just post a face shot of their avatar or dog or favorite cartoon character in their profile. One of the appeals for kids (young and old) is that, like kids' virtual worlds that sell real-world plush toys, Foursquare has real-world objects that serve as awards or "nerd merit badges" representing "the virtual achievements you get for checking in to places using Foursquare," Mashable reports. In other words, you get points for showing up at your favorite Starbucks, points which can add up to becoming its "mayor."

This morning I testified at a US House of Representatives joint-subcommittee hearing on "The Collection and Use of Location Information for Commercial Purposes" – the privacy and safety implications of just this sort of technology. There definitely seemed to be a consensus in the hearing room that consumer privacy law needs to be updated and that, to be effective over the long term, the updating shouldn't focus on any single technology. I completely agree with that because the people who used to have control over how cellphone users' location information is used – the mobile carriers – no longer always do. More and more, control is spread out across the spectrum: carrier, operating system provider (e.g., Apple, Google, Microsoft), app developer, and consumer (because, with apps like Foursquare, we're disclosing our own location). It's all becoming a mashup - which is why parents need to know that all these apps on iPhones and iPod Touches allow kids to share their location.

So – if your child's phone is on a family plan behind your password with, say, AT&T or Verizon Wireless, and if you don't use the parental control that blocks app downloads (something to consider if they're not telling you what they download) – it's a good idea periodically to check what apps your kids have on their phones and ask them what these apps do. If they share your child's location with anyone besides you, you'll want to have a conversation about who's on their contact list. Make sure it's only friends they know in "real life." Certainly all this goes, too, for iPod Touches, which are not on family cellphone plans. As for Google Buzz, which is both phone- and computer-based, see my post on that; parents will want to help their kids see the value of making their conversations "private," or just among friends, which points to a negotiation: All participants in the conversation need to agree that it's just for them and adjust privacy features accordingly.

[BTW, Foursquare isn't the only location-based cellphone app. Others are Brightkite and Whrrl (see this blog post); Gowalla, which isn't a social game (see this blog post); and the cellphone service loopt, which is becoming more app-like (see Mashable.com).]

Google Buzz & kids' privacy

Because Buzz is brand-new and a hybrid of Gmail, micro-blogging, cellphone social mapping, and social networking, we're all at the early stages of figuring out its implications for kids – a lot of whom use Gmail. Yesterday Charlene Li, a mom and well-known social-media-industry analyst, blogged that she had discovered her 9-year-old daughter was using and really enjoying Buzz. Using it from her computer (people can also use Buzz on Apple iPhones and Google Android phones), the child had had one conversation on it with her friends. The problem was that the kids didn't know their conversation was public. Li wrote that "the easiest thing to do as a parent is to simply disable Buzz, meaning that the Google profile and all followers are deleted – permanently" (go to the bottom of your child's Gmail page and click "turn off Buzz," which will take you to where you can disable it). But because Li's daughter enjoyed Buzz so much, she seems open to "managing groups, privacy settings, etc." so her child can continue using the service. "We’ll give it a try," she writes, "but unless her friends also keep the conversation private, it will all be for naught." Ensuring that with all the other kids and their parents could be quite a project. Privacy is now a collective effort – by users too, not just providers (see "Collaborative reputation protection").

Last summer Google agreed, in response to a complaint by one of the FTC's "safe harbors" (organizations that help it enforce the Children's Online Privacy Protection Act, or COPPA), to require a birth date at registration to Gmail and, if a user indicates he or she is under 13, a session cookie to block the user from re-registering with an earlier birthdate. That's a start, but what this issue points to is the impact on children's privacy of combining social-media products within companies and connecting them across networks such as Facebook Connect. Perhaps the FTC's forthcoming review of COPPA rules and enforcement will address this emerging issue. But we feel the brilliant software engineers and project managers who develop these products need to wear their parent hats more, companies need to be thinking through children's privacy from the earliest developmental stages, and industry best practices need special sections or clauses addressing child privacy and safety. [See also "Google Buzz isn't exactly humming along" in the Wall Street Journal; "Does Google Buzz violate COPPA?" by Marquette University law Prof. Bruce Boyden (the jury's still out, he indicates); and my post at Buzz's launch, "Major buzz about Buzz, but not about its safety."]

Major buzz about Buzz, but not about its safety

Google's Buzz, which it unveiled today, means to make Gmail much more social – adding updates and photo- and video-sharing; turning emailers into Twitter-like "followers"; and making all of that local to you (and you to it) via your cellphone, according to hundreds of news articles including PCWorld's. That last bit concerning geolocation raises some safety concerns, writes ConnectSafely.org co-director Larry Magid in CNET, where he posted an audio interview with Google co-founder Sergey Brin. Writing also in the Huffington Post, he says "Mobile Buzz, which will work initially on the Apple iPhone and Google Android phones," taking advantage of their GPS tech "so that users will not only be able to update their status but their location as well." Of course Buzz will work with Google maps. Will that social pinpointing capability be something people have to consciously turn on? I hope so, because young people don't always stop for safety or privacy reality checks in the rapid-fire back-'n'-forth of teen texting and socializing. But how much will that help even so? These products like Buzz are all just social convenience tools to teens. Teens don't think as much as we do about separate stand-alone products, services, or devices, each with its own privacy policy, set of terms of service. It's all much more of a means to the much more important end of staying connected and maintaining mindshare with peers. That's a challenge when companies just want to throw these various tasks at the lawyers and be done with it. The good news is, Google's integrating all of its Buzz-related products for fixed and mobile use; maybe they'll have integrated safety and privacy too.