Presentation Title Here 30pt Arial

1. Presentation Title Here 30pt Arial Social Networks - Problems of Security and Data PrivacyDraft statement for CEPIS By CEPIS LSI SIN 37th CEPIS Spring Council - Prague

2. AGENDA • CEPIS LSI • Motivation and Background • Importance of the topic • Why a statement now? • The statement • Background • Introduction • Concerns • Recommendations • Next steps and actions for LSI SIN 40th CEPIS Council Meeting 20thNovember 2008

3. CEPIS LSI • CEPIS Special Interest Network "Legal & Security Issues" • Working field: • IT security aspects • Legal issues (connected with IT security) • Goals: • Rising IT security awareness • Discussion of IT security issues (technical and non-technical viewpoint) 40th CEPIS Council Meeting 20thNovember 2008

4. CEPIS LSI • Chair: Prof. Kai Rannenberg (GI, Germany) • Secretary: Marko Hölbl (SSI, Slovenia) • Members: • IT security experts • Lawyers • Other interested parties 40th CEPIS Council Meeting 20thNovember 2008

5. MOTIVATION AND BACKGROUND – IMPORTANCE OF THE TOPIC • CEPIS has seen a growing concern over the security and privacy issues surrounding Social Networks. • Some issues arise because of the international dimension • Some issues arise because of a lack of awareness of the ways in which information may be misused • Some issues arise as business and commerce begin to use social networks for commercial purposes 40th CEPIS Council Meeting 20thNovember 2008

6. MOTIVATION AND BACKGROUND – WHY THE STATEMENT NOW? The use of social network services by children and young people is growing rapidly There is growing interest in the commercial potential of social networks The exploitation of the personal information entered on social networks is beginning to be seen An international approach is needed 40th CEPIS Council Meeting 20thNovember 2008

7. THE STATEMENT • Statement overview: • Introduction • Concerns • Recommendations 40th CEPIS Council Meeting 20thNovember 2008

8. INTRODUCTION • Social Networks may serve various purposes: • To share information, photographs, music or video between friends • To make or maintain contact with people of similar interest (business or pleasure) • To interact with others to play interactive games and / or live out your fantasies 40th CEPIS Council Meeting 20thNovember 2008

9. INTRODUCTION So, today we talk about Web 2.0 20thNovember 2008 40th CEPIS Council Meeting

10. INTRODUCTION • Social Networks • Contact sites • Social networking sites • Visual information sharing sites • Game and interactive virtual reality sites 20thNovember 2008 40th CEPIS Council Meeting

11. CONCERNS CEPIS LSI SIN concerns: The misuse of personal data entered on social networking sites Criminal activity Exploitation of minors The policing of social networking sites 40th CEPIS Council Meeting 20thNovember 2008

12. RECOMMENDATIONS • To encourage ENISA and other international authorities to: • Encourage the citizen to gain a better awareness of the issues involved • Encourage international agreements on security and privacy protection responsibilities of the service supplier, and standards to be adopted. • Initiate a debate on the need for new standards and a new approach to security and privacy protection for organizations wishing to use these sites for commercial purposes. • Initiate debate on the legal and social implications of virtual world ‘crime’ • Promote ‘Safer Social Networking’ for all. 40th CEPIS Council Meeting 20thNovember 2008

13. NEXT STEPS AND ACTIONS FOR LSI SIN • Future statements and activities: • Data protection developments in law enforcement • Future topics that may arise and need the attention of CEPIS LSI SIN 40th CEPIS Council Meeting 20thNovember 2008