Skip to content
What Jim Carrey needs to know about social media privacy
Naked Security Naked Security

Social media etiquette for Jim Carrey (and everyone else)

Jim Carrey has apologized for tweeting a photo of a child without asking for permission. He's not the first!

What Jim Carrey needs to know about social media privacyActor Jim Carrey has apologized for tweeting the photo of a child with autism and tuberous sclerosis without asking for permission from the boy’s parents.

Carrey has removed the photo, which illustrated a post in his ongoing campaign against what he and a small but vocal faction of people believe are vaccines containing neurotoxins that cause autism.

The claim has been widely discredited, and the 1998 study on which it was founded has been deemed fraudulent.

The tweet without the photo:

The tweet came in the wake of California having passed one of the nation’s strictest childhood vaccination requirements last week: a law that eliminates parents’ ability to claim “personal belief” exemptions to school children’s vaccine requirements in the state’s schools.

Carrey had tweeted a picture of Karen Echols’ son Alex in protest over the legislation.

The Guardian reports that the boy’s aunt, Elizabeth Welch, posted the tweet on Instagram and accused Carrey of using the post to “mock” him and and his family, and that vaccinations played no part in his condition.

Karen Echols then asked Carrey to remove the image:

…which he did, with an apology:

Social media etiquette tips

Neglecting to ask parents for permission before posting photos of their children is a social media faux pas, and Jim Carrey certainly isn’t the first to discover that after the fact.

Parental forums are full of posts that don’t mince words on this topic. Here’s an example, from, titled “i hate facebook. stop posting pics of my baby!”:

i'm so annoyed. i hate how anyone can just post pictures of you and your baby. i never used to be like this but i've become increasingly private, especially about my kids. i don't need my personal photos for my mom's 400 "friends" to see. people who came to the hospital don't need to post their own photos. if i forward my family pictures they don't need to take it upon themselves to re-post to facebook. but i feel like such a bitch saying "can you please take down these photos of my family?"...or that i seem paranoid. i just don't like it!

No, you’re not paranoid, “erinandbrian”. People are like out-of-control paparazzi around both kids and adults, and far too many of them ignore privacy principles when snapping and posting.

In fact, a recent study commissioned by Nominet for its online safety campaign knowthenet found that 25% of people surveyed never ask permission of the people in photos before posting, and 53% have uploaded a photo of a child that wasn’t their own.

Mind you, parents aren’t excluded from oversharing their children’s images online.

The study found that 17% of parents ignore privacy settings and still post hundreds of photos of their kids online.

The study found that the average parent uploads an eyeball-popping 973 photos of their child on social media by the time he or she reaches the age of 5.

A few years ago, Amy Webb wrote a piece for Slate titled We Post Nothing About Our Daughter Online.

She reasoned that this approach is:

the only way to defend her against facial recognition, Facebook profiling, and corporate data mining.

Naked Security subsequently ran a poll asking readers if posting photos of your child on Facebook makes you a bad parent.

Most of you – 72% – answered, quite reasonably, “No, but I’m careful about what information I post about my children.”

If you’d like to pass on some tips for those people in your life who could use a bit of a primer on using social media in a way that protects people’s rights – at any age – here are some tips:

  • Check your privacy settings.
    Take a look at your social network’s privacy settings and make sure you change them from the default if necessary to button down privacy. Don’t overshare; rather, be careful about posting information about yourself, your family or your friends. Lock down social media accounts so you’re not publicly sharing things like photos or when you’re away on vacation. Facebook, for one, translated its privacy policy into plain English in November, which should help. As should these 5 tips to make your Facebook account safer.
  • Think before you upload.
    Common courtesy requires us to ask if it’s OK before we post photos of others. It doesn’t matter how adorable a photo is or if you’re trying to illustrate your concern about vaccines. If the photo isn’t yours, make sure to ask for permission before you post it. After all, once that photo’s online, it’s practically impossible to stamp it out.
  • Keep up to date.
    Social networks regularly add new features and update their own settings, so it’s important to stay on top of them.
  • Stay in control.
    Don’t use social networks as a replacement for your own photo albums or hard drive storage, and remember that some social networks will obtain rights to your images once you’ve uploaded them.

How to avoid the flame wars

Besides rules about images, there are also plenty of social media etiquette rules to avoid creating the scene of torch-bearing villagers outraged over simple misunderstandings.

I’m thinking here about the supposed “creep” shamed on Facebook who was actually just taking a selfie with a Darth Vader cut-out.

Cue the torch-wielders, hurling death threats at the guy who’d been incorrectly blamed for snapping photos of others’ kids. Then, cue the torch-wielders who turned on the mother who made the incorrect assumption and posted an unjust accusation.

What a mess. How about these rules instead?

Before posting, consider:

  • If it would be better to send a message to a specific audience instead of broadcasting it publicly.
  • If the content could offend somebody, and if so, are you OK with that?
  • If you’ve posted something already, could repeatedly posting it be considered offensive?
  • Is the post is clear, or is it vague and could be misinterpreted?
  • Is the post well-reasoned or are you emotionally venting?

That’s far from an exhaustive list, of course.

Readers, what rules would you add to the list, whether it’s for Jim Carrey, yourself or the online community in general?

Jim-Carrey-2008” by Noemi Nuñez – Licensed under CC BY-SA 2.0 via Wikimedia Commons.


Are you Hungry? Angry? Lonely? Tired? Then HALT, don’t post! These tend to be the commonest causes of irrational or angry posts.

I doubt people in that frame of mind are big on self-analysis but it’s worth pointing out anyway…


I created a private group in Facebook. So far that seems to prevent grandma from sharing with people outside of the group. that does not stop people from downloading and re-posting the pics


I think there’s an equally important issue here that you touched on but didn’t develop, namely that it is especially unacceptable to use an image of someone else without permission if, by doing do, you imply that they agree with you (or disagree, of course).


Any photograph taken in a public place, or at any gathering, is likely to include people. It should not be necessary to get the permission of each and every one before publishing. I have regularly appeared on BBC regional TV library footage of an Accident & Emergency waiting room. The BBC did not ask my permission, nor should they.
But if anyone asks me to remove his or her picture from Facebook or Youtube, I would comply. It has only happened once.


You are in part correct. If you take a photograph with people in the scene you don’t necessarily need permission but if one of those people is used as a focus of the photo then permission is required before you can publish or sell. At least in the U.S.. That is why I have to carry permission slips and a lawyer in my back pocket when I’m out with my cameras.


…but that’s just one example of an endless number of reasons why people should ask before posting. Revenge porn, using somebody’s image to turn them into an unwilling poster boy or poster girl for your cause, violating the privacy of a birthing room… the list is long when it comes to the myriad ways to take advantage of people by appropriating their image.


This just shifts the story away from Carrey’s main point, Thiomersal is bad, vaccines without it are proven safe and effective. The financial and govt elites get clean vaccines that don’t have Thiomersal, wonder why that is?


True that. This article doesn’t just shift the discussion away from thiomersal—it pretty much ignores it completely, and for good reason: medical debates aren’t the focus of this blog.

Naked Security’s mission is information security, and data/image privacy is a big part of that. It’s not our job to dissect the debate about vaccinations. It *is* our job to dissect the impropriety of appropriating kids’ images. Or anybody’s images, for that matter.

That’s our angle. That’s our platform. That, as Paul Ducklin might say, is the foundation of our proselytizing.

That’s our story, and we’re sticking to it! :-)


I am not a lawyer, but a friend of mine whose brothers are active licensed lawyers in the state of California recently told me the following:

In California, you must have the consent of:

1. A child’s primary custodian(s) before you publish a film or a photograph that you have made of the child; and

2. Adults whose image(s) appear in a film or a photograph that you want to publish, regardless of whether you had intended to film or photograph them.


Leave a Reply

Your email address will not be published. Required fields are marked *

Subscribe to get the latest updates in your inbox.
Which categories are you interested in?
You’re now subscribed!