We are Cullen Hoback, director of "Terms and Conditions May Apply," and ACLU's Christopher Soghoian. We love talking about digital privacy rights. Ask us anything!

Thanks for doing this guys! I have loved the ACLU since I first heard about them and actually got to see TACMA at an early screening (Slamdance) and it was great!!

So my question is, given the fact that my data is already bought and sold on a regular basis, what can I do to reclaim my own information? Is it too late? Do I just need a new identity?

I'd like to see two things happen. First, we should at least have access to all of the information that these companies have on us. Second, I'd like to see users have the right to control that data. In other words, the data that Facebook or Google has should be considered property of the user. Users should be able to take it, exchange it, and delete it as they see fit. Obviously this would require a dramatic shift in terms of how both corporations and the government approach user data, but it's possible.

In the meantime, sign petitions that demand change, get a cabin, or both.

Hi! I'm excited for the movie but there's nothing near me. Will there be more screenings? Maybe one near DC?

We are working on dates for DC. In the meantime you can request a screening via Tugg. We also have a campaign right now at trackoff.us to petition Congressmen to see the film. I don't think most people sitting on Capitol Hill have a strong understanding of how these systems work, which is a bummer since they're writing the rules.

When making Terms and Conditions May Apply, did anything surprise you about the legal policies of software companies? What can these companies do to get users more involved when accepting ToCs?

What still surprises me is that companies can change the terms at any time. What contract would you ever sign where the other party can change the agreement later? You wouldn't.

Do you believe that this will, in the long run, hurt the US IT economy. The German president has already warned the EU service providers to pull data out of the US, as we cant be trusted.

Signed,

concerned cloud server analyst.

I think that the first question should have always been (and still should be), are these systems violating our civil liberties? If the answer is yes, then it doesn't matter if they're stopping terrorism or bolstering the economy. Innovation should be the most logical response to these revelations and could, in fact, usher in new opportunities with privacy at the forefront.

[deleted]

Of course I did. And probably 27 other times before I actually read the thing.

Do YOU read the terms and conditions??

Most terms and conditions are actually very similar, so not anymore. But basically, the "free" services seem to have the most onerous and unreasonable terms and privacy policies. The deeper problem is of course government access. And though you can find this line item buried within the terms, it's really things like FISA and the Patriot Act that require it. The companies are just cough cough complying.

What is he most shocking terms and/conditions you've seen that were actually applied?

Go to duckduckgo and type in "getty images scam".

Hey guys ! Thanks for doing this movie. I'm studying law in France and specializing in privacy, especially on the internet and I think it's really important to tell people about it. Will you show the movie in France, or in Europe in general ?

Important field to be working in, you may actually have a job in the future. And yes, we're working on it. We don't have all of Europe sorted out yet, but I imagine within a few months it will be available to you either on TV or through various Internet means. Or you can just get it illegally.

Haha yes sure, but I actually want to pay for it this time. Can't wait to see this movie !

I hear anticipation only makes it better. Or is it the other way around?

Does the "terms and conditions" enforceable in court? I mean there is no way the customer can disagree with the term, some don't even show you the terms you are agreeing to unless you go to a new web pages. How about new terms? They just send you a email saying there's new terms and conditions, it's not like we can even agree on those.

So far terms and conditions agreements are considered legally binding and enforceable in court, at least in the US.

How long did it take to make the film?

About 2 years. It felt like a race against the clock, with privacy ticking away by the second.

[deleted]

It would, in fact, take you 180 hours every year to read everything you agree to. Hope you're up for a part-time job.

Until we see some legislative change, there are various tools I'm sure many redditors could recommend.

Try TOS;DR. They're expanding rapidly, and although you may have to read some terms still, the major ones are covered here, or will be covered soon.

Have an upvote.

How much do you think the average internet user knows about where there information is going online and how it's being used?

Also, is there any way to protect your privacy/data without avoiding the use of major web apps and social networks?

Part 1) Redditors are some of the more skilled on the web, and I hear this accounts for 6% of all users. But beyond that, I think the level of awareness is shockingly low. Just the fact that the Snowden leaks have been seen as revelatory I think speaks to that point. Though some parts blew my mind.

Part 2) There are tools like Ghostery, Duckduckgo, Disconnect, Firefox, Tor, etc. that can help.

What was the most interesting interview or piece of an interview that we won't see in Terms and Conditions May Apply and why was it left out?

I had a shot setup with the CEO of Magnetic, a company that, according to their website "empowers advertisers and publishers to use search data as the key indicator of intent and retarget campaigns to the most relevant audience online". I had a series of questions related to how our data moves behind the scenes, the value of that information, etc. When their CEO found out what the name of the film was, he walked away before the interview even began.

Also, the aftermath of my encounter with Mark Zuckerberg.

Please, do go on.

Well, he told me to go into their headquarters and set up an interview, so that’s what I proceeded to do. The conversation between the receptionist and myself went something like this:

Her: “Hi, can I help you?”

Me: “I’m here to set up an appointment with Mark Zuckerberg.”

Her: “Oh?”

Me: “Yeah, I talked to him this morning, and he said to come by and set up an interview.”

Her: “You talked to him this morning?”

Me: “Yeah.”

Her: “You talked to Mark?”

Me: “Yes."

Her: “Where?”

Me: “On his way to work.”

A look of dread crosses her face.

Her: “Hold on.”

It was at this point I thought that news must have spread that a crazy filmmaker had confronted Mark on his way to work.

Now, I had been in this office before; I had tried many, many times to get anyone at Facebook to talk to me about their privacy policies. So you must imagine my shock when they actually bother to take my phone number and say they’ll “be in touch.” I then tell her they can just use my Facebook profile.

The sequence just didn’t fit in the film (and I didn’t have permission from the receptionist to use the footage). I’m still waiting for that interview.

So, if it's important to read Ts and Cs, what do you say about the apocryphal easter egg Ts and Cs that have a giveaway or something embedded in them that goes years or decades unclaimed?

Happy hunting.

I had to sign up for reddit to engage in this conversation. I didn't bother to read the terms for use of the site...I wonder what I just signed away?

You could always read them...

reddit actually put a lot of thought into their Terms and Conditions. They even brought in an expert from EFF to help make sure they were user privacy oriented.

True. I think they're the best I've seen.

Is digital privacy really dead?

If Google Glass somehow becomes ubiquitous, then yes. Until then, there's hope.

[deleted]

If you adhere to this philosophy, then we need to figure out how to build these technologies in a way that preserve our civil liberties and keep our thoughts our own.

Mr Hoback,

I look forward to seeing your movie. Obviously in the light of recent NSA news, I think we would all like to hear you describe in your own words your perfect Sunday.

Brunch in sandals with Edward Snowden.

Any preference on the country you would most like to meet him in?

The USA.

Eric Snowden: whistleblower or traitor?

Hero and patriot.

Don't most companies make their terms and conditions through consultation of a lawyer? Why are they usually so long and unreadable?

They're long and unreadable for a mixture of reasons. User agreements are designed to protect the company, not the user. The length and font choices also effectively hide the nature of the trade we're making, as well as aspects of surveillance. By being so long, few people read them. This allows companies to take just about whatever they want. Unfortunately, this is a one-sided agreement and we presently either get the service, or we don't.

I think a warning label system that's clear, concise, and shows how your data would be handled could be an effective solution to raising awareness, but it wouldn't solve the overall problem.

Thanks for taking all of our questions, guys.

What are your thoughts on librarians instructing/educating the public through programs and classes on digital privacy rights? What would you recommend for library professionals to focus on in trying to get everyone to understand the do's and dont's regarding their digital privacy?

I think that the film will actually be quite helpful as an educational tool. We're also developing a packet to be used in academic environments to engage students.

A lot of people are 100% sure that Prism is unconstitutional. Is it?

I understand that there are innumerable arguments to be made about how unethical it is, and how it violates our presumed privacy, but is it unconstitutional?

Is the government allowed to search your mail without a warrant?

What are your thoughts and opinions about the internet hacktivist group Anonymous. Everything they have fought for, and still do, correlates with the same types of things the ACLU fights for and against. Thanks.

I'd like to see Barrett Brown released as soon as possible.

Are shrink wrap agreements and EULAs really about 'digital privacy rights'? People voluntarily turn over information because they want to get valuable services. If merchants engage in out and out fraud, they can be criminally prosecuted. Reputation constrains legitimate companies from engaging in shady behavior short of criminality. Isn't it odd to address information that people routinely give away without a thought in order to play Farmville under the rubric of 'rights'?

It's probably more reasonable to say that privacy policies aren't about protecting privacy at all, but rather, taking it away.

Cullen, what were you most surprised to learn in your investigation?

That Mark Zuckerberg walks to work.

So how tall is the Zuck in person?

About 6,000 pages worth of user data, if you stacked it. So 3-4 users' worth, depending on how long they've been a member and frequency of use.