Regulation could protect Facebook, not punish it
techcrunch.com
techcrunch.com
1. Strong anti-monopoly regulation. There is no reason for Facebook owning Whatsapp & Instagram.
2. Once your revenue exceeds x million USD on ad supported services that are free for end users, you must offer the service also for money with reasonable margin on top of the actual production costs, with strong guarantees that the data of end user who has opted for paid service is kept private and not monetized anyhow.
3. Once your revenue on ad supported services that are free to end users exceed y million USD, you must make easily available every single usage of the end user's data. Also, user must have right to prohibit any specific type of use of user's data.
I think #2 is over-regulation, given #3 users can decide if they want to support the product or not by using it.
Also, if you deactivate your account companies should no longer be able to use your data.
Regulation is harder than it seems. The legal system we use... it just doesn't really work that way. It doesn't fail just because of corruption and such. That said, here's one. Whatever they collect, users can elect to have a copy and easily with a 3rd party. At least that way we could watch them watching us.
I like the size threshold but not the solution. Toying with business models should be a solution of last resort.
Simpler: for companies with more than X users or Y gross revenues, an American GDPR. Consumers get an absolute right to audit and delete their data. Explicit consent is required for each instance of third-party sharing. Companies are liable to their users for breaches, with a minimum amount directly claimable by users through an easily-accessibly regulator.
Size-dependent threshold exist across our tax and regulatory codes. Concepts like beneficial ownership [1] and affiliation [2], amongst others, address these issues.
There tends to be an inverse relationship between regulation in a space and incumbents springing up, for better or for worse
It isn't a huge loss if we no longer explore models that require violating privacy protections to get off the ground.
I bet it will not inhibit startups in the EU.
In recent times, being a privacy-aware service is a selling point and the EU services can easily advertise as being privacy-first to US citizens while US companies will have trouble doing so (considering SESTA/FOSTA and CLOUD act)
Facebook seems to grab whatever it can, just to make money.
Same applies to 3. at some extent. Only 1. may be assumed reasonably (even though still not "easily", as in practice it will just produce more work for lawyers and accountants) transparent for the public.
"[...] with strong guarantees that the data of end user who has opted for paid service is kept private and not monetized anyhow."
As an "actual programmer" myself, I don't see how that would be so burdensome to implement. The data is somehow segregated so that it's excluded from being sold to advertisers in any form. The user can have their data deleted permanently at any time.
It obviously wouldn't prevent someone from authorizing a 3rd party app to all of my Facebook data, but that is more about Facebook educating people about what they're consenting to rather than a philosophical debate about ownership of data.
Oh, but you will see, when your manager (who doesn't really understand the implications of various technical decisions, by the way) will order you to do something completely meaningless (in your opinion), because the regulatory documents (made by people who understand and care for the implications of technical decisions far, far less than your manager) say something meaningless, contradictory and hard to interpret in the first place. If you aren't familiar with such situation it's probably because you are not working in a regulated industry, not because these things "solve themselves" in practice. No, in practice they don't.
That doesn't mix with there being free users whose data is sold to advertisers, because it's the same data. You share your photo with another user who in turn shares it with another user etc. That's what a social network is.
So what happens when the vast majority of everything is shared with both types of users? If touching a free user means it can be subject to facial recognition and tagging and everything else for advertising then there is little point in paying. If touching a paid user means it can't then it destroys the revenue model for free users and the price of paying would be high enough to discourage everyone from doing it, because you're de facto paying for all the free users you share anything with.
In the most general and seemingly "harmless" case these laws do exactly nothing: nobody is following them and nobody tries to punish people for not following them. This just makes the legal system more complicated (and — yes, there are plenty of such laws, and this is one of the reasons so many legal systems are shit) and provokes the disrespectful, hand-waving attitude towards the law, which isn't a good thing either.
Because to me, both are quite useful outputs. The first one is quite common practice, and for the second one there are other industries (e.g. financial, medical) from where we can see how this is actually already done in legislation and practice.
(I would think that majority of Google's and Facebook's technical challenges are because they want to utilize the customer data.)
If the company wishes to use private data for anything else than providing service to the customer, it must ask for permission.
They can still pick ads based on the private data and personalise the user experience but they can not share or otherwise disclose it to anyone else.
Industry support for regulations can seem counter-intuitive -- why would a company want to increase its cost of doing business? But it makes sense when you consider that the costs are an anti-competitive weapon. One example is when Philip Morris supported FDA regulations of cigarettes: http://www.slate.com/articles/business/moneybox/2002/07/smok...
So, we should be very careful about how we regulate companies' use of customer data, lest we make it even more difficult for Facebook's competitors.
Facebook is a boredom cure at best, and at times it can be a version of the cold, hard, cringey truth. You might complain that Facebook harms mental health, but the reality is that sometimes the truth is the most depressing thing to learn.
If Facebook does harm by preventing enough escapism, there’s no regulatory cure to fix that. You’ll just have to wait for the tide to shift. But hey, look at that, today’s your lucky day...
People really are that bored. People’s lives are frequently very lackluster and uneventful. This is plainly obvious, because whenever someone delightfully ordinary (yet comfortable with that) comes along, it seems like such a breath of fresh air amongst all the puffed out try-hards that grab so much attention.
The cringey reality check is the depressing part that creates the anxiety of never wanting to leave the house. People have a hard time differentiating between bullshit and not bullshit.
It’s not entirely correct to blame Facebook in particular for the inadequacy felt, when comparing one’s self to someone else’s carefully currated (yet seemingly natural) photo album.
That part of the debate is just the bulemia-caused-by-waif-as-fashion-model-redux. You can’t fix that by removing Facebook from the equation, because people will never stop beautifying their profile pics and cherry picking exclusive-yet-swollen friend lists.
So we’ll cure it by all jumping ship to Mastodon, where the photo albums will be crappier and less enviable, and we’ll all be less cringey? That’s the plan?
This isn’t about elections at all, is it?
I was merely responding to a comment that I thought didn't accurately portray the harms that social media can cause. Perhaps you could address those points?
> to want to destroy you
That doesn't sound healthy...
Support for regulation of casinos is born largely out of the idea that many people are not fully responsible for their psychology.
Federated social media (e.g. Mastodon) only serves part of the problem. It's like going from the casino to your friends' houses; ill effects still exist, but the domain is not controlled by a profiteer, who may have incentives to maximise and exploit those ill effects.
Additionally, if we do introduce social media regulations (shudder) you can guarantee Facebook will have a hand in writing/influencing them to benefit itself and hurt any startup competitors, as the article argues.
I wouldn't be opposed to basic data protection laws, but I'm always wary of "oh just regulate them" as an automatic cure-all for when we don't like how a company behaves. There's almost always unintended consequences.
Citizens' right to privacy trumps startup creation.
You're assuming that regulatory capture protects privacy better than competition would.
The evidence is to the contrary. Debian and Open Whisper Systems are better at it than AT&T and Comcast.
It doesn't matter that the information eventually comes to light, because they're the dominant social media company by that point, buying up their competitors, and it takes a lot more to get rid of them.
There is no way to tell when they sell it but there is a way to tell when they have it to begin with.
If you're using software with public source code that you know is end-to-end encrypting the message to the recipient, you know there is no third party doing nefarious things with the data, because no third party has the data to begin with.
And that's the distinction that matters. Prohibiting a company from selling your data to someone who will do evil things with it is no use if the company itself can still do the exact same evil things with it. Or just get itself hacked like Equifax and reveal all the data to the attacker.
"The not-so-secret goal of SESTA and FOSTA is made even more clear in a letter from Oracle. “Any start-up has access to low cost and virtually unlimited computing power and to advanced analytics, artificial intelligence and filtering software,” wrote Oracle Senior VP Kenneth Glueck. In his view, Internet companies shouldn’t “blindly run platforms with no control of the content.”
That comment helps explain why we’re seeing support for FOSTA and SESTA from odd corners of the economy: some companies will prosper if online speech is subject to tight control. An Internet that’s policed by “copyright bots” is what major film and record studios have advocated for more than a decade now. Algorithms and artificial intelligence have made major advances in recent years, and some content companies have used those advances as part of a push for mandatory, proactive filters. That’s what they mean by phrases like “notice-and-stay-down,” and that’s what messages like the Oracle letter are really all about."
I don't think this is really the case anymore - at least from the FB engineers I know.
Great engineers are at FB because they get to deploy really interesting projects on the largest platforms in the world with best in class technologies, or get to work on cutting edge AI research (FAIR) or interfaces (Oculus).
The whole "connect the world" thing seems to be an afterthought at best for most.
Deploying code to a billion people is only thrilling the first time anyways
I expect any legislation to make competition with Facebook very difficult.
- solving the decentralized infrastructure: as nodes get taken offline, they can replace themselves, and service is still usable
- solving payments for services to third parties that aren't directly the users: cannot rely on traditional payments infrastructure, since that is easily co-opted by regulatory bodies and be used agaisnt the developers/owners of such services since those have traditionally tied ones identity to such payment information.
The solution to market dominance is antitrust enforcement.
Only breaking at least one tech giant up will ever change the status quo. In FBs case that could be very simple - in theory. They’re only allowed to operate over specific geographic regions, say states in the US and feature (IM separate from profile separate from gaming) In practice, though, they're probably too big and global to be broken up.
In reality, it depends entirely on the details of the regulations.
“In my post yesterday, I emphasized that what’s at stake with Facebook today is not about privacy or publicity but informed consent and choice. Facebook speaks of itself as a utility while also telling people they have a choice. But there’s a conflict here. We know this conflict deeply in the United States. When it comes to utilities like water, power, sewage, Internet, etc., I am constantly told that I have a choice. But like hell I’d choose Comcast if I had a choice. Still, I subscribe to Comcast. Begrudgingly. Because the “choice” I have is Internet or no Internet.
“I hate all of the utilities in my life. Venomous hatred. And because they’re monopolies, they feel no need to make me appreciate them. Cuz they know that I’m not going to give up water, power, sewage, or the Internet out of spite. Nor will most people give up Facebook, regardless of how much they grow to hate them.”
and
“Thus far, in the world of privacy, when a company oversteps its hand, people flip out, governments threaten regulation, and companies back off. This is not what’s happening with Facebook. Why? Because they know people won’t leave and Facebook doesn’t think that regulators matter. In our public discourse, we keep talking about the former and ignoring the latter. We can talk about alternatives to Facebook until we’re blue in the face and we can point to the handful of people who are leaving as “proof” that Facebook will decline, but that’s because we’re fooling ourselves. If Facebook is a utility – and I strongly believe it is – the handful of people who are building cabins in the woods to get away from the evil utility companies are irrelevant in light of all of the people who will suck up and deal with the utility to live in the city. This is going to come down to regulation, whether we like it or not.
“The problem is that we in the tech industry don’t like regulation. Not because we’re evil but because we know that regulation tends to make a mess of things. We like the threat of regulation and we hope that it will keep things at bay without actually requiring stupidity. So somehow, the social norm has been to push as far as possible and then pull back quickly when regulatory threats emerge. Of course, there have been exceptions. And I work for one of them. Two decades ago, Microsoft was as arrogant as they come and they didn’t balk at the threat of regulation. As a result, the company spent years mired in regulatory hell. And being painted as evil. The company still lives with that weight and the guilt wrt they company’s historical hubris is palpable throughout the industry.
“I cannot imagine that Facebook wants to be regulated, but I fear that it thinks that it won’t be. There’s cockiness in the air. Personally, I don’t care whether or not Facebook alone gets regulated, but regulation’s impact tends to extend much further than one company. And I worry about what kinds of regulation we’ll see. Don’t get me wrong: I think that regulators will come in with the best of intentions; they often (but not always) do. I just think that what they decide will have unintended consequences that are far more harmful than helpful and this makes me angry at Facebook for playing chicken with them. I’m not a libertarian but I’ve come to respect libertarian fears of government regulation because regulation often does backfire in some of the most frustrating ways. (A few weeks ago, I wrote a letter to be included in the COPPA hearings outlining why the intention behind COPPA was great and the result dreadful.) The difference is that I’m not so against regulation as to not welcome it when people are being screwed. And sadly, I think that we’re getting there. I just wish that Facebook would’ve taken a more responsible path so that we wouldn’t have to deal with what’s coming. And I wish that they’d realize that the people they’re screwing are those who are most vulnerable already, those whose voices they’ll never hear if they don’t make an effort.”