Photo Tagging as a Privacy Problem?
An anonymous reader writes "The Harvard Law Review, a journal for legal scholarship, recently published a short piece on the privacy implications of online photo-tagging (pdf). The anonymously penned piece dourly concludes that 'privacy law, in its current form, is of no help to those unwillingly tagged.' Focusing on the privacy threat from newly emergent automatic facial recognition search engines', like Polar Rose but not Flickr or Facebook, the article states that 'for several reasons, existing privacy law is simply ill-suited for this new invasion.' The article suggests that Congress create a photo-tagging opt-out system, similar to what they did with telemarketing calls and the Do-Not-Call Registry." How would you enforce such a registry, though?
I didn't RTFA, admittedly, but there's a "remove tag" link on Facebook. A lot of people I know use it, and just ask their friends not to tag them. It does the job well enough. And if that doesn't do it, there are privacy settings that can prevent anyone other than yourself or a specific group of people (friends/network/etc) from seeing the photos.
that when you posted something, especially photos, on the internet it was no longer private.
I think tagging works best in services such as Panoramio where you can actually make something of the photo you tag. Since Panoramio is by definition a "landscape photos" service, tagging public dominion images will never create any problem.
The only way out of personal tagging photo services is if companies like Flickr keep an e-mail address for those seeing their photos online and wanting them off. But they will have to prove they are the guys/gals on the photos. How will they do that? Sending other photos or ID?
A mess...
"Sum Ergo Cogito"
If you enjoy privacy, don't put your personal information (including pictures of yourself) on the internet. What's so hard about that?
Silence is golden... and duct tape is silver.
"New invasion" it says, but isn't it just people doing whatever they want with their property. In this case that being photos?
If you're trying to stop people from doing whatever they want with their own (online accessible) photos, some further steps down this "new invasion" might be: "My name/company/pet is mentioned/being blasted on a website! Noooooooooo must stop them!"
Random other person X takes a picture of you. Maybe you were standing in a public place and didn't know your picture was being taken. Person X uploads the photo and tags it with your name. Other than spending your entire life outside of publicly-viewable physical locations and simultaneously ensuring that no-one knows your name (so that if they do manage to get a picture they don't know how to tag it), what sort of control do you have over that?
I am by no means trolling here, when I say that if someone doesn't want their picture floating around on the Internet, don't send it into the tubes. As far as I am concerned, once it has gotten there, the horse has left the barn.
As for laws that would deal with some kind of do-not-tag list, that is just damned stupid. Yes, somehow, magically all of these photohosting sites are going to be able to use facial recognition and ensure that someone else's photo doesn't have you somewhere in it? Facial recognition, from what I am hearing, is coming along, but it is nowhere near "that ready".
Personally, I am going out on a limb here, I see two options: one is that since most photos of people of teh interwebs is self-posted, simply have an option chosen at registration that says something to the effect of "do you wish other users to tag your photos?" and have a radial button beside yes/no. Or even a photo-level option, so that upon uploading and posting a photo it asks a similar question.
My other idea is decidedly less kind to those who get their photo posted: don't let other people take your picture. yes folks, you don't really need your photo taken, and it can be done with out looking like a party pooper. Volunteer to take the picture.
People have to start learning about technology, and the consequences of society's use of it. Imagine if people knew that posting that picture of them underage drinking at a high school bash on MySpace is going to get them in deep doo doo. Or that what they type can be used against them. Or that they shouldn't just post their personal details for all to see (including extra-marital affairs.... something I have seen several times) With action comes consequence... here endeth the lesson.
Now, for those who might start pointing their fingers at me, saying that "they are talking about people who get caught on camera without knowing it, like the bikini-clad Stanford co-ed students on Google Earth and such!" To that, I would say, you can't see a single identifying feature about them. And if you did get a picture taken by Google Earth that could be used to identify you (and let us face it, that number would be small indeed), if you were outside, you really have no reasonable expectation of privacy in such a situation.
Just my 2c...
Sometimes the right solution to a problem isn't a new law. I confess I'm not sure what the right solution is (it might be "ignore it," or it might not), but I don't think it's a new law...
We have a plenty of current privacy concerns to worry about - unwanted indexing of old postings, surveillance cameras, abuse of SSNs and credit card purchase histories. Let facial recognition software become useful before we legislate it, otherwise the law will likely be both incomplete and overreaching due to lack of experience. Certainly, there should be no restrictions on people indexing their private photo libraries without asking for anyone's permission.
I'm trying to figure out, "What is it about this quotation that's bothering me?"
There's something that bugs me about this whole thing; Like we're ashamed of who we are, or like we're trying to keep ourselves safe from all the judgmental people out there, or like we don't have the courage to tell people, "Hey, this is how I have a good time, and you just have to deal with it."
I can't quite put my finger on it...
I think it has something to do with my ideas about how social progress is made. I think that, when, as a people, we're hiding and squirreling away the realities in our lives, from "the public," I think we're doing a disservice to the world. When people catch our private lives, and we have to say, "Well, you know what? Screw you all- THIS IS OKAY, and here's why" -- we find ourselves unwitting social activists.
We may have spent all our lives hating social activists, and bitterly spitting, saying, "Just keep it private," but now, something is exposed, and we have to start talking to people.
I think that's something of how progress is made, in society. I think a genuinely tolerant and compassionate society is not made of a bunch of people putting blinders over their eyes.
If you don't want people seeing your junk, you don't hang your junk out your trunks when you go to the mall.
If you don't want people seeing your junk online, don't hang your junk out on myspace where everyone can search for it and see it.
Instead of government protecting people from the bad decisions they make, how about we let society learn and advance to the point where people understand what the internet is, and how it can be used to benefit, and to harm; and let that awareness grow.
Just like kids are taught to look both ways before crossing the street, this needs to be something taught and passed along as a public safety issue by society, rather than brought down upon the people by the government.
Well, we all know how well those "do not call" lists work. I still get those calls (but strangely they hang up when I ask what institute they call for... strange, ain't it?), despite being on "the list".
But that's not even the problem. The problem is the same as with spam. Normal phone calls and snail spam have a limit to its propagation, it become expensive to do it from abroad. Spam is a different matter, where a national law can't even remotely address the problem, if it's not allowed here, the spam is sent out from some country that doesn't care about spam.
It's the same problem with pictures hosted somewhere. Accessable from anywhere on the web, it does not matter whether you have laws against displaying people or items. Some country won't, and those pictures will be hosted there instead.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
The solution I prefer over restricting access to information is flooding everybody with information. OK, there will be pictures of you doing something stupid. So what? There will be pictures of everybody doing something stupid.
The only advantage I can see to restricting information is that people can keep their hypocritic attitudes. With the flooding solution, attitutes will need to change.
I guess this is why Congress attacks picture labeling, rather than the kind of privacy information that really matters, such as shopping habbits. The later just re-inforses the corporate hold over the citizens, while the prior threatens the micture of hyporacy and pre-judices commonly known as "family values".
If you willingly let yourself get photographed, and someone puts it up on Flickr with your name on it - how can you expect privacy? Same as if you are photographed walking down a street - where is the violation of your privacy?
"Sure there's porn and piracy on the Web but there's probably a downside too."
The Problems with Unwanted photo's on the Internet:
Employers, divorce lawyers and other miscreants just need an excuse to make your life difficult. For example, you happen to be in the same picture with a criminal, then you are automatically tagged and associated with a criminal. Don't under-judge how unfair and unreasonable people can be.
Associating your face and your name with unwanted adjectives (tags), like let's say "alcoholic". Of course libel law can deal with this, but it is anything but cheap or easy for the average person to deal with.
And I can imagine getting your image off the Internet is about as easy as the MPAA stopping people from downloading some rather lame movies.
I don't think there are any solutions for this. If your boss doesn't think you have the right "image" for the company based on something an ex-boyfriend uploaded to YouTube, then maybe it's better off you don't work for that type of company. Of course my high moral standards have never made me rich. It is however a thought.
...with robots.txt but not stop my face being indexed. Something's wrong here.
To the other posters who say "don't post your pictures online": I never have; never will; never gave permission; yet e.g. Google image search shows several pictures of me posted by people who I've never met. It's briefly flattering when you first find yourself; but I wish the pictures weren't there.
This could become a nightmare for those in witness protection. Photo of Mr X in his original town. Automatically recognized and tagged photo of Mr X in town Y, hundreds of miles away.
Not only is this suggestion a really bad idea it seems pretty obviously unconstitutional. Rather than giving any serious consideration to the question of whether likenesses of ourselves taken in public deserve protection the paper reads more like something a student would write trying to create an impressive paper. After all everyone realizes that our loss of privacy is a bad thing so lets propose changing the law to fix it, right?
Sure, our loss of anonymity can have some harmful consequences as the anecdotes in the paper illustrate but this doesn't mean they can't convey important information. I mean on first glance the story about the republican congressman whose daughter was seen kissing another girl on facebook might appear to illustrate a harm of our loss of privacy, and it certainly was a harm to the congressmen, but I would argue it was actually a benefit to society. If that congressman didn't get elected because people found out what he was really like (more tolerant than they suspected) then it was a win for the country.
Ultimately all this technology does is let us effectively say who did what when. Surely it wouldn't be right or constitutional to ban the news media from telling us about the picture of the congressman's daughter. Nor is it acceptable to outlaw any particular act of saying who is in what picture, that is quite squarely inside the domain of free speech. Yet if free speech protects my right to tag each individual photo then it would be a very troubling precedent to set to say it doesn't protect my right to organize those tags in an accessible way. I mean just think of the problems you would get into just trying to catalog the CSPAN archive to indicate which congressmen were doing what when.
More generally while the short term effect of a loss of anonymity in public might be immediate harms in the long term we will eventually discover that everyone does stupid shit and crosses sexual and religious lines. Hopefully the ultimate effect of this loss of anonymity will be to eliminate the double standard which allows everyone to say swears, have naughty/kinky sex, and make blasphemous/non-PC remarks but gives any public official caught doing it hell.
Of course it is scary to lose a protection that has kept us safe for so long but the truth of the matter is that anonymity in public is eroding no matter what we do about it. We can either choose to embrace the good consequences along with the bad by allowing search engines and tagging sites that set up a level playing field for everyone or we can choose a system where those with enough money and lawyers get to keep their anonymity while the rest of society does not. However, that's the worst of all options because it isn't really the loss of anonymity that's harmful but the unequal loss of anonymity. If someone at your office finds pictures of just you getting drunk and doing stupid thats awful, if they can find pictures of a large fraction of the employees it's just amusing.
--
Note: purposeful anonymous commentary, e.g., anonymous blogs, are a totally different subject and should be preserved.
If you liked this thought maybe you would find my blog nice too:
For the paranoiacs, Paronamio has been acquired by Google this week (more info here).
"if companies like Flickr keep an e-mail address for those seeing their photos online"
You haven't mentioned it, but I guess you already know about FlickrMap. Flickr is part of Yahoo!, and they're not going out of the competition vs Google / Microsoft and alternatives on the mapping stuff and photos.
Animoog.org
This is why, in the EU, it is an offence to collect "Personal Data" without consent, except where there is a legal, contractual or public interest reason for collecting and processing the data.
In addition there are requirements that a data controller has to inform a subject of what the data is to be used for, and to whom it will be given, regardless of whether the subject gave the data or a 3rd party did (except in the case of some law enforcement). The data controller should ensure your personal data is as accurate as possible.
There are requirements that the data not be stored for a period longer than is necessary to perform the processing, and that you can always refuse your data to be used for marketing. You also have the right to appeal any automated decisions made with the data. You have a right that your data is held securely, and the directive clearly states that a company holding data should be aware of the "state of the art" of security procedures, providing cost is not prohibitive.
You can't export personal data to a country that doesn't provide equivalent legal protections (e.g. the USA), regardless of any contract between companies.
And finally, there is a right to judicial remedy if the directive is breached by a company, including compensation.
I note that a normal person is not bound by the directive, but any EU-based organisation storing such data is (company, charity etc.).
I am pretty sure (IANAL) that if organisations like Polar Rose worked out of the EU, any personal data they collected would count as controlled data, regardless of who supplied it to them, and they would have a duty to inform the subject etc.
EU Directive 95/46/EC
Article 1: (part)
1. In accordance with this Directive, Member States shall protect the fundamental rights and freedoms of natural persons, and in particular their right to privacy with respect to the processing of personal data.
Article 2: (part)
(a) 'personal data 'shall mean any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity;
Article 7:
Member States shall provide that personal data may be processed only if:
(a) the data subject has unambiguously given his consent; or
(b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; or
(c) processing is necessary for compliance with a legal obligation to which the controller is subject; or
(d) processing is necessary in order to protect the vital interests of the data subject; or
(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller or in a third party to whom the data are disclosed; or
(f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by the third party or parties to whom the data are disclosed, except where such interests are overridden by the interests for fundamental rights and freedoms of the data subject which require protection under Article 1 (1).
-- The Diamond Age, Neal Stephenson.
Also see Moral Relativism.
Comment removed based on user account deletion
tagged in a photo?!?!?
give me back my SOUL!!!
Only slightly related, but what happened to Riya, the software used to identify faces once a face has at least once been tagged with a name? I think there was an outcry about the potential implications, and then I never heard about it again. Their web site looks like the last time I checked one or two years ago. I'd like to have something like that for my private photo collection locally.
I know Riya is mentioned in the article, but it doesn't seem to answer my question.
The constitution of the United States does not explicitly define privacy as a right. Courts have decided somewhat haphazardly that you have certain expectations of privacy in certain situations (like when you are in your own house with all the doors shut and windows covered). However if you have your photo taken in a public place then you have no right to tell people what t do with that photo. They can tag it, sell it to a tabloid, use it to create a parody of you or just post it everywhere on the net that will take it. This is all true because the Constitution of the United States does protect the freedom of the press. This freedom at its core exists to protect the people from the government and make sure information and Truth is always free to be distibuted. Therefore, newsworthy or not your ugly mug can be posted, tagged and flaunted all over the net as long as the shot was taken in public or a public setting and there is not a damn thing you can do about it.
The right to post photographs wherever you like is simply freedom of speech, if we support freedom of expression how can we limit it to specific means of communication? As usual I've argued far more here: http://alittlebitoffreedom.blogspot.com.
I was just going to ask (as a suggestion I hope people will pick up on) that we all start wearing face-masks in public. So far as I know it's not illegal (as long as you don't, i.e., hold-up a liquer store while wearing one) and will allow people not only privacy, but greater ability to express themselves than is afforded by clothing and makeup. Imaine all the cats and dogs you'll see coming at you down the street. All those hidden cameras they put everywhere... useless. What a glorious day, shame the masks are neccessary though, as they shouldn't be. I am thinking of getting one that looks like a penguin. I will be unique. Just like everyone else. Plus then people may also assume I'm an OSS fan. All good things.
~Hallux
Don't put pictures of yourself on the Internet if you don't want pictures of yourself on the Internet.
(And if you do, please, please, don't geotag them.)
Terrorists can attack freedom, but only Congress can destroy it.
Immediate problems:
/. support <pre>...</pre>? I'd like to throw in a little HTML without having to worry about line breaks.)
Until a significant number of people are doing it, it probably won't help your privacy much, as you'll draw attention to yourself.
Many businesses and government offices will tell you to take off the mask or leave. (Maybe worse, if you're unfortunate.)
If your city has cameras all over its streets, they can follow you home (without showing themselves). (By "they", I mean crackers, officials, and anyone with enough money to get the attention of one of the first two.)
Long-term problems:
If lots of people start doing this, it will probably be made illegal, whether or not there is any increase in crime (or unsolvable crime).
Recognition software would likely be made to estimate the shape of your head.
(Off topic, but why doesn't
This is not a signature.
Why'd I have to talk before I was done reading?
This is not a signature.
This is not a signature.
Degrade into a fat ugly slob. Then no one will want to socialize with you anyway, and those who till do won't want you to be seen with them in any pictures either. So no worries about being posted online.
Problem solved!
PS: The above is not really joking... people who worry about this are mentally deranged. I don't need the web to get a photo of you, all I need is a $50 and a lowlife with a camera, I give them your name and address (which I can get from your name) and I'll have a photo of you within a day.
This whole discussion is assenine.
look to Photography laws dealing with privacy. Photographers need special permission to print photos of recognizable people. Same should apply online. If someone takes a pic of you that lands online and you don't want it there send them a cease and desist order. If they don't abide, you have a right to sue them in to the ground for privacy invasion as well as other things, like making money directly or indirectly off of you (via google ads or whatever else)... It doesn't matter if the photos were in a public or private location. If the person or people in the photo are recognizable and the photographer didn't issue a model release form, they shouldn't be making the photos available to the public (especially online, etc). If they do, sue em. You have rights... Use em! Just because cell phones have cameras nowadays doesn't mean that people should be using them as stupidly as they do all the time. In the old days you had to be rich to afford a nice Kodak analog camera... nowadays everyone and their dog has a darn digital camera or cell phone. That privilege, like the privilege of driving a car is often abused by the majority. Sue them and make them double think what they are doing. The privacy laws already exist. Use them!
Secondly, have you never made a mistake? Let's say you are walking in the mall and your trunks accidentally rip and there, despite your best good-faith efforts, your junk is all of a sudden hanging out in the wind. People aren't robots. Maybe you never make a mistake, but as for the rest of us, we mess up from time to time.Of course people can control what they post about themselves online. But we cannot control what others post about us online. That's the point. Let's say you get drunk and do something stupid. I take a photo and post it on my website and tag it with your name. Currently, there isn't a damn thing you can do about it. And that's what the government is trying to address.
Personally, I think this will be less and less of a problem as time goes on. As more and more of us have our indiscretions and mistakes posted online, we'll be more understanding of the indiscretions and mistakes of others.
On the other hand, I did some stupid, stupid shit in college. Photos were taken, and I'd hate to be in a position were I in college today where these photos were posted online and tagged with my name. Then, every time anyone, an employer, an acquaintance, a child, anyone googled my name, their screens were covered with photos that were obviously me doing things that I don't need to get into here.
They don't grade fathers, but if your daughter's a stripper, you fucked up. --Chris Rock
I agree there are problems with the course of action I suggest, but there are also problems not taking this action. A little personal 'situational awareness' would help with many of the problems, like someone following you home. This assumes total 100% coverage surveillance, and that people might not have multiple masks. You could carry several, or everybody could just use the same one. Hmmm... sounds like a halfway decent idea for a SF story. :)
You make a strong point, to which I offer this as an alternative: suppose masks don't have to be so overt. Maybe... a simple, strategic application of makeup, or camouflage which might not be detected as a mask would be sufficient. Or just everyone agreeing, (like school kids dropping textbooks off their desks in unison at exactly 1:55 PM style) to start wearing exactly the same thing. Blue denim jeans, white T-Shirt, black leather jacket. All about the same color, shade, material, cut, and fit, which would make it substantially harder to track an individual, at least, without going to much greater pains.
As for businesses, I don't know that they necessarily could refuse. (As an experiment, try it. I'm not somewhere where I can conveniently, but may when I get home.) Not at least until it is banned by law. And if it is banned, perhaps the measure will have achieved its objective, to wit: forcing the 'man' to outlaw anonymity openly, forcing him to 'take off his mask', metaphorically speaking, revealing the true tyrant beneath.
As for your longterm fear of cranimorphological identification, it'd have to be able to see through your hairstyle, which would be extremely tough, considering most people's heads are shaped close enough to alike to render such recognition from a distance to be problematic. I'm not worried about that.
The key here is, at least we, the people, would have taken a stand on it. It doesn't work if just I do it, or just you do it. And if it did result in an increase in crime, or terrorism, just maybe, it'd force governments to rethink pissing people off for the sake of money, hmm?
Think about it.
~hal