Certainly, one type of issue is to determine with whom you're sharing information when you use social media. Even if someone wants to restrict the group of people with whom data would be shared, it is easier said than done to actually ensure that this is the case. This leads me to a larger issue, which I'm considering after more or less six months in the job. That is, one of the challenges that social media raises, among other issues, is that we need to think about the relative role of individuals, of organizations, of regulators, like myself, and of legislators in ensuring that the privacy of individuals is respected.
Your question implies that individuals who actually use technology have a responsibility—there is no question about that—but it's not always easy for them to exercise control, because it is not obvious always what will be made of their information. Private organizations have responsibilities and we have a principle under the PIPEDA legislation of accountability, which is extremely relevant to this. It is a principle that I intend to pursue to ensure that organizations do act in a responsible way.