[LINK] personally-held collections of personal data

[Karl Auer]

On Fri, 2013-03-22 at 22:04 +1100, Roger Clarke wrote:
> At 21:28 +1100 22/3/13, Karl Auer wrote:
> >  ... What responsibility do we have - legally, practically, 
> >ethically - to people whose personal details we have collected as 
> >private individuals?
> 
> >What centralised address-book services highlight is that ... these 
> >new services ... are facilitating, and encouraging, the escape of 
> >the data into networks of people, devices and virtual data stores. 
> >NSWPC (1977) recognised the potential for data held by individuals 
> >to harbour threats to privacy. With advances in technology, that 
> >potential has now come to fruition.
> >  ... the disclosures involved in centrally-stored address-books and 
> >'testimonials' throws into serious question the blanket exemption 
> >from data protection laws of personal data in the possession of 
> >private individuals.

What I hope my blog made clearer, and the aspect not covered in your
article from 2004, is not so much the mere storage in a third-party
service, but the fact that these third party systems *use the data* -
for their own ends, sometimes on behalf of the storing party, and
sometimes on behalf of yet other parties. That is, they do not merely
store, they *actibvely mine it*, as well as, in some cases *actively
share it on*.

Given that (say) Facebook will do this, what responsibility does one
have to *not disclose one's contacts to Facebook*?

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)
http://www.biplane.com.au/kauer
http://www.biplane.com.au/blog

GPG fingerprint: B862 FB15 FE96 4961 BC62 1A40 6239 1208 9865 5F9A
Old fingerprint: AE1D 4868 6420 AD9A A698 5251 1699 7B78 4EEE 6017