Tuesday, November 20, 2012

Irish Data Protection Commissioner Facebook friend

The Information Officer at the Irish Data Protection Commissioner's Office has responded to my complaint about Facebook.
"Dear Mr. Corrigan

Thank you for your email received by our office on the 16th November, 2012.
The provision of personal data by Facebook Ireland either on a user's account, activity log, the download tool and the enhanced archive is considered by this Office to fully meet the requirements of the Data Protection Acts in relation to access.

If you consider that specific data is not available we need specific information from you as to what data in particular you consider was not made available.

Yours Sincerely

Stewart Fennell
Information Officer
Office of the Data Protection Commissioner Canal House Station Road Portarlington Co. Laois

Ph: 057 868 4800
Fax: 057 868 4757
E: info@dataprotection.ie
Interesting trick that.  The Irish Data Protection Commissioner's Office believe Facebook "fully meet the requirements of the Data Protection Acts in relation to access" and require me to detail the specific data that Facebook have about me that they have not made available.

Yet I don't know the data they hold on me and want to find out. If I can borrow from a certain Mr Rumsfeld, this is a known unknown the details of which are unknown to me and therefore unspecifiable by me.

I've replied to Mr Fennell as follows.
"Dear Mr Fennell,

The point of my original data access request was to find out what information Facebook hold on me.

The company has made clear in its automated response, despite your apparent belief to the contrary, that it does not provide all the data it holds on users through its download tools:

"One tool provides the most common data users are seeking when they make data requests. The second tool, called “expanded archive”, contains additional data.  We will continue to add data to your expanded archive over the next few months."

Could you explain how I provide you with specific information on data that is not made available by Facebook, without having any way of finding out the specific data it does not provide through its download tools?

I would remind you again of the plain wording of section 4(a)(iii) of the Data Protection Act which refers to entitlement to “information  constituting any personal data of which that individual is the data subject”,

I fail to see how a link to a couple of data download tools with restrictive licences and an instruction to use these to mine the Facebook site to see what I might find can be considered by the Data Protection Commissioner to “fully meet the requirements of the Data Protection Acts in relation to access.” Could you therefore provide me with evidence of this and details of the Commissioner’s ruling to the effect that these Facebook tools do fulfil the company’s obligations under the Acts and how and why they do so.


Ray Corrigan"
Update 21 November 2012:  At 10.10am this morning I got another acknowledgement from the IDC's office identical to the first one they sent - they have not yet categorised my communication as a 'query' or a 'complaint' with the same warning in Irish and English that I should not share it with anyone but they will get back to me within 15 days.

No comments: