{"id":192,"date":"2009-12-21T00:29:07","date_gmt":"2009-12-21T04:29:07","guid":{"rendered":"http:\/\/blogs.law.harvard.edu\/niftyc\/?p=192"},"modified":"2011-07-29T22:52:44","modified_gmt":"2011-07-30T02:52:44","slug":"on-facebook-only-the-rich-have-privacy","status":"publish","type":"post","link":"https:\/\/archive.blogs.harvard.edu\/niftyc\/archives\/192","title":{"rendered":"On Facebook, Only the Rich Have Privacy"},"content":{"rendered":"

(or: Technology Policy by Default<\/strong>.)<\/p>\n

If you are one of 350 million Facebook users, you may recall that when you recently used the site you were asked to “update” your privacy settings. \u00a0This Facebook privacy “transition” started earlier in December, and it has now escalated into a full-blown scandal. \u00a0EPIC<\/a> just filed a complaint with the Federal Trade Commission<\/a> and the bad press is building up. \u00a0Essentially the EPIC claim is that this is a “transition” to less privacy for you<\/strong>, handled in a deceptive manner<\/strong>.<\/p>\n

\"find-us-on-facebook\"
\n<\/a>(a double entendre?)<\/em><\/em><\/p>\n

Facebook and indeed most Internet companies like to justify their policies with reference to individual choice as an ideal<\/strong>. \u00a0The individual user has “options” “settings” and “preferences”. \u00a0Each person should set their own privacy settings and indeed choose anything else that is controversial — the companies involved say that this is much better than the scary government choosing for everyone. \u00a0Yet a moment’s consideration of this false choice will tell you that it doesn’t hold up. \u00a0After all, who has time to monitor all of the possible settings and configurations for every piece of software that we use? \u00a0Moreover, how much of privacy is really a matter of taste that should vary for each person? Few have the knowledge and the energy to develop an informed opinion about every checkbox and button we encounter online. \u00a0Even given the time, interest, and knowledge, it can be remarkably hard to find these settings at all.<\/p>\n

It turns out that the people who most benefit from the ability to set their own software preferences are well educated I.T.-saavy professionals with money — the people who suffer are the poorer and less educated users. \u00a0So making privacy an individual option\u00a0basically takes privacy away from the poor<\/strong>. \u00a0This may sound bold but hear me out: \u00a0If you followed that request to update your privacy settings, it eventually led you to a page that looks like the following image.<\/p>\n

\"privacytoolscreencapture_0\"<\/a><\/p>\n

(Click to enlarge.)<\/em><\/p>\n

What kind of psychological weight follows from Facebook asking you make a choice and then selecting one of the two options for you in advance?<\/strong> (In this case, note the option on the left is selected by default — the one that in most cases gives you less privacy.) \u00a0Rajiv Shah<\/a> and I published a paper last year titled Software Defaults as De Facto Regulation<\/a> (PDF) looking at this question.<\/p>\n

We used the example of wireless access points to investigate how often people change their default settings and what kind of people do so. \u00a0The nice thing about wireless access points is that different routers have different defaults, and it is possible to monitor the default settings of wireless access points by driving around with a laptop computer and listening to their transmissions<\/strong> (which we did). \u00a0Of course the content of the setting matters — but privacy settings on facebook and security settings on wireless routers are at least similar.<\/p>\n

\"South_Central_LA_030.sized\"
\n<\/a>Research in progress!
\n(Click to enlarge.)<\/em><\/p>\n

In this study we looked at several groups of routers, the largest being more than a quarter million (!). \u00a0In at least some circumstances, when a setting is turned “ON” by default, from 96-99% of users just follow the default<\/strong>. \u00a0When the default was set to “OFF” and then users were told to change manufacturer defaults, from 28-57% of users did so. \u00a0In this case, equipment likely to be maintained by paid I.T. experts was somewhat more likely to have changed defaults (a 16% difference for one setting).<\/p>\n

By looking at wireless settings in different neighborhoods of Chicago, we also found at least a suggestion that people in\u00a0poorer neighborhoods were more likely to obey manufacturer’s default settings. <\/strong>(Long parenthetical: \u00a0Here and\u00a0in the title of this post “poor” and “rich” are proxies for money as well as<\/em> other things — wealth is a proxy for education <\/em>and time <\/em>as well as just money. \u00a0Poorer people will tend to have less technology skill and less time to become informed and interested in things like social network privacy issues.)<\/p>\n

So calling this a “choice” basically means the manufacturers choose for most people, particularly if they are not skilled <\/strong>(see p. 42 of our paper). \u00a0Facebook gets to have the appearance of consultation (after all, you “agreed” by clicking through the above screen) even though the result overall is the reduction of privacy. \u00a0As is clear in the table of this dotrights.org analysis of the Facebook privacy transition<\/a>, the Facebook move is all about changing the defaults. \u00a0They presumably did so because more data accessibility means more visibility and value for their service.<\/p>\n

The larger point is that\u00a0facilitating “choice” is bankrupt as a societal strategy for managing difficult problems<\/strong> (like privacy) related to new technologies. \u00a0More than anything, it’s a strategy to circumvent difficult public deliberation (in this case, about privacy) that we as a polity ought to have. \u00a0Even\u00a0in the case of decisions with real consequences, if individual choice is used, as we put it: “the authority of software trumps that of advice” (p. 43)… Facebook’s pre-selected default options are going to be the societal policy in this area. \u00a0And that means that effective regulation requires the scrutiny of defaults. \u00a0Pushing individual choice offers us false freedom and this is not good enough.<\/p>\n","protected":false},"excerpt":{"rendered":"

(or: Technology Policy by Default.) If you are one of 350 million Facebook users, you may recall that when you recently used the site you were asked to “update” your privacy settings. \u00a0This Facebook privacy “transition” started earlier in December, and it has now escalated into a full-blown scandal. \u00a0EPIC just filed a complaint with […]<\/p>\n","protected":false},"author":2132,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[1321],"tags":[],"class_list":["post-192","post","type-post","status-publish","format-standard","hentry","category-research"],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4M7Bm-36","jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/archive.blogs.harvard.edu\/niftyc\/wp-json\/wp\/v2\/posts\/192","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/archive.blogs.harvard.edu\/niftyc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/archive.blogs.harvard.edu\/niftyc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/niftyc\/wp-json\/wp\/v2\/users\/2132"}],"replies":[{"embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/niftyc\/wp-json\/wp\/v2\/comments?post=192"}],"version-history":[{"count":17,"href":"https:\/\/archive.blogs.harvard.edu\/niftyc\/wp-json\/wp\/v2\/posts\/192\/revisions"}],"predecessor-version":[{"id":598,"href":"https:\/\/archive.blogs.harvard.edu\/niftyc\/wp-json\/wp\/v2\/posts\/192\/revisions\/598"}],"wp:attachment":[{"href":"https:\/\/archive.blogs.harvard.edu\/niftyc\/wp-json\/wp\/v2\/media?parent=192"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/niftyc\/wp-json\/wp\/v2\/categories?post=192"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/archive.blogs.harvard.edu\/niftyc\/wp-json\/wp\/v2\/tags?post=192"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}