Will FTC Force Facebook Onto Privacy Straight and Narrow?

Settlement could help Facebook if it takes new stand on user privacy, say analysts

By Sharon Gaudin

November 30, 2011 — Computerworld — After angering users with one privacy misstep after another, Facebook yesterday settled charges by the U.S. Federal Trade Commission (FTC) that it had deceived users and shared information it had told them would be private.

Now users and industry analysts are waiting to see if Facebook will correct its course on privacy matters or continue on with nothing more than a slight mark from its slap on the wrist.

"At Facebook, it appears that the culture there is privacy and consumer protection last. Instead it should be among the top priorities," said Zeus Kerravala, principal analyst with ZK Research. "Facebook would do themselves a favor by nipping this now. I hope they actually take security seriously now, but only time will tell.

"History would indicate not," he said.

Noting that he thinks the agency was too easy on Facebook, the world's largest social network, Kerravala, added, "There's no guarantee that this will change things. I thought [the FTC] should have hit them with more."

On Tuesday, the FTC unveiled an eight-count complaint against Facebook, charging the social network with not keeping its promises to users and deceiving them "on numerous occasions" by sharing information that people thought was being protected. Facebook has agreed to a proposed settlement.

As part of the proposed settlement, which is open to a public comment period, Facebook is not allowed to continue making deceptive claims about its privacy and must get users' approval before making any changes to the way it shares their information. The FTC also mandates that Facebook consent to periodic privacy audits for the next 20 years.

"I think this may help Facebook in the medium- and long-term," said Dan Olds, an analyst with The Gabriel Consulting Group. "It gives them a specific set of mandated privacy policies they have to adhere to, and that will cost them some time and money and maybe even limit their ability to make money on user data, sure.

"But -- and this is a big but -- as long as they adhere to these policies, they can now duck any outside criticism about their privacy policies by pointing to the FTC and saying, 'Hey, we're doing everything they've told us to do,'" Olds said.

However, in the short term, the settlement means that yet another spotlight is shining on the social network's privacy failings. That focus comes just as word spread that Facebook may only be months away from launching its initial public offering.

"In the short run, we might see Facebook's previous privacy problems discussed again, which isn't great publicity," Olds said. "But it will all be in the context of Facebook agreeing to the new FTC regulations, which puts a good face on it.... I don't think this will have a negative impact on Facebook's IPO."