Data portability has been a hot topic as of late. What I think everyone has neglected to consider is who owns which bits of data. For example, my email address is mine. I choose to give it out to friends, family, associates that I want to be able to contact me. That doesn’t, however, mean that it’s also theirs to use how they see fit.

For example, if you’re my friend and you wish to download your social graph to port it to Hi5, Ning or somewhere else, you should be able to do that. However, that doesn’t mean you can take my email, phone, physical address etc with you. What needs to be preserved is our association, not my data. This could be achieved by a public identity such as OpenId and a UUID value tied to each user - ideally the solution would be easier to create so even my mother could do it. Conversely, your data should be able to be ported to the new network without interference from Facebook, MySpace or anyone else.

What makes this discussion difficult is shared property. Consider a tagged photo on Facebook for a minute. I’ve taken the photo which includes you. To make it more complicated, let’s say you tag yourself in the photo. I still own the photograph, it’s even protected under US Copyright law should I choose to exert my rights. But you’re in it - and you want to use it as a profile picture… what to do? This type of shared relationship requires permission in my opinion. Since we’re friends, you know if I’m likely to grant you permission or not when you ask. This process could easily be automated. This could even be automated to the less vague bits of information such as contact information (email, phone, address etc).