Welcome to Scribd, the world's digital library. Read, publish, and share books and documents. See more
Standard view
Full view
of .
Look up keyword
Like this
0 of .
Results for:
No results containing your search query
P. 1
OIPC - Social Media Guidelines

OIPC - Social Media Guidelines

Ratings: (0)|Views: 1,170 |Likes:
Published by pop-kid
From the Office of the Information and Privacy Commissioner of Alberta, new guidelines for using social media for background checks.
From the Office of the Information and Privacy Commissioner of Alberta, new guidelines for using social media for background checks.

More info:

Published by: pop-kid on Dec 15, 2011
Copyright:Attribution Non-commercial


Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less





September 2011 Introduction
Social media is a relatively new communication medium that continues to transform how we liveour lives. However, social media is in its infancy in legal and policy implications. Like a credit orcriminal background check, many employers, volunteer agencies, and other organizations arenow conducting social media background checks on future and prospective employees andvolunteers. They conduct these checks with and without the knowledge of the individuals theyare checking. Currently, there is little guidance from administrative tribunals or from courtsabout this issue. The Office of the Information and Privacy Commissioner of Alberta
has developed these guidelines to help organizations navigate social media background checksand privacy laws. The OIPC is concerned that organizations may be implementing social mediabackground checks without fully understanding the legal implications of doing so.
A “social media backgroun
check” can mean many things.
It can be as simple as checking aFacebook profile or as complicated as hiring someone to search for every bit of social mediaabout an individual.
The term “social media”
in these guidelines captures a broad range ofinformation such as social networking sites
, blogs
, micro-blogging
, and file sharing sites(including photographs and video).
For many, the concepts of “privacy” and “social media” are inherently at odds, since individuals
often post information online about themselves because they want people to see it. Whenorganizations search for information about an individual, the collection, use, and disclosure ofthat personal information is subject to the privacy provisions of the
Personal Information 
There are many ways that employers can search for social media content about an individual. Micro-blogging sites like Twitter have real-time search engines(twitter.com/#!/search-home)and sites such as Google Advanced Search(google.ca/advanced_search)filter results by criteria such as domain name and file type.
There are now almost 200 major social networking sites. Several boast tens of millions of members.Some networks likewww.facebook.com
are intended for general social networking purposes. Otherniche sites target certain regions(http://mixi.jp ), activities(www.couchsurfing.com/ ), ethnic groups (www.blackplanet.com/ )or faiths(http://muxlim.com/ ).
Employers can search for information from blogs using customized search engines like Google blogssearch(www.google.com/blogsearch).
One of the best-known micro-blogging sites is twitter.com with over 200 million users.
Examples of popular file-sharing sites include www.flickr.com and www.dropbox.com. 
Guidelines for Social Media Background Checks
December 2011
Protection Act 
(PIPA) here in Alberta. PIPA applies to Alberta organizations and fully to somenon-profit organizations and on a limited basis to certain non-profit organizations
Putting social media background checks in context
While social media background checks may appear enticing, the reality is that many risksassociated with conducting social media background checks exist. As a result, organizationsneed to clearly understand the legal implications associated with conducting a backgroundcheck using social media in order to properly assess the risks of using social media forbackground checking.In particular, organizations need to ensure that they comply with therequirements in PIPA with respect to the collection, use anddisclosure of personal information and personal employeeinformation, as well as ensure the collection, use and disclosure isreasonable. Organizations also need to recognize that using socialmedia for background checking may result in non-compliance withPIPA because there is no ability to control the amount of informationcollected, which may result in the collection of irrelevant or too muchinformation about an individual, and collection of third partyinformation. In addition, issues associated with consent and accuracyneed to be considered.Personal information and personal employee information are defined separately in PIPA, andthe provisions regarding consent to collect personal information and notice to collect personalemployee information should be reviewed carefully by organizations.
Is a social media background check reasonable?
Prior to using social media background checks to collect personal information, an organizationmust understand its business purpose for doing so, and consider the reasonableness of doingsuch a check. Under PIPA, an organization must be able to establish that use of social mediato collect personal information or personal employee information is reasonable for the purposesof collection. Organizations need to consider what a social media background check willprovide that cannot be garnered from traditional means such as reference checks andinterviews.There are other legislative requirements that Organizations should be aware of when collectingpersonal information via a social media background check such as the
Alberta Human Rights 
Section 56 (b) provides that PIPA
does not apply to a “non
profit organization”, which is defined in PIPAas ”an organization that is incorporated under the
Societies Act 
or the
Agricultural Societies Act 
or that isregistered under Part 9 of the
Companies Act 
, or that meets the criteria established under the
regulations”. For these non
-profits, PIPA applies only to personal information collected, used ordisclosed in connection with a commercial activity. Any non-profit organization not meeting the definitionof
non-profit organization
in PIPA is required to comply fully with the requirements in the Act for allpersonal information collected, used or disclosed.
See sections 1(1)(k) and 1(1)(j) for definitions of personal information and personal employeeinformation, respectively. Sections 15, 18, and 21 establish the conditions under which an employer maycollect, use or disclose personal employee information without the consent of the employee. Certainprovisions must be met.
There are legal implications that organizations must consider prior to performing social media background checks.
It would not be reasonable to collect personal information under PIPA that violates the
Alberta Human Rights Act 
Are you 
collecting irrelevant and too much personal information? 
Like a dragnet, social media background checks can catch muchmore than what was intended. Individuals performing the checkscould collect personal information that is irrelevant. Under privacylaws, organizations can only collect personal information that areasonable person would consider appropriate in the circumstances.With social media background checks, organizations lose controlover the quantity of information they collect about an individual. Withother forms of information gathering, organizations can control theamount of information they collect. For example, an employer wouldnormally ask for
references about a job candidate’s
work habits butnot about the individua
marital status.
Are you collecting third-party personal information? 
Of particular importance in social media background checks is theinadvertent collection of third-party personal information. Forexample, if an organization obtains consent from an employee orvolunteer to view his or her profile on Facebook for a reasonable
purpose, in viewing that individual’
s Facebook profile, theorganization may be collecting personal information without consentabout other individuals who have posted on the Facebook profilepage. While organizations can in certain circumstances collectpersonal employee information without consent, they must take intoaccount that using social media to collect personal information about
an employee will likely result in the collection of a third party’s
personal information, which may constitute a violation of PIPA.
 Even if an organization was in a position to only collect personal information about a singleindividual on a social media website, the organization may have difficulty meeting thereasonableness requirements if its collection results in the collection of more personalinformation than is needed to meet the purpose of the collection.As can be seen, the lack of control over the collection of information from social media websitescreates a risk for organizations of non-compliance with PIPA.
See section 7(1)(b) of PIPA.
The lack of control over the collection of personal information from social media websites creates a risk for organizations of non-compliance with PIPA.
Of particular importance in social media background checks is the 
collection of third-party 

You're Reading a Free Preview

/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->