TORONTO - When a photo of the late Rehtaeh Parsons was used for a dating website's advertisement on Facebook last year, the callous misappropriation of her image shocked those who saw it.

It should've also been seen as a warning, say privacy experts.

Having a photo stolen and reposted elsewhere online could just as easily happen to any of the millions of Canadians who regularly post images to the web without a second thought.

"Many of us are sharing images without considering how others may use them or how we may lose control," says Marian Merritt, the Internet safety advocate for security software maker Norton.

Last September, ads for the now defunct featured photos of Parsons with the text, "Find Love in Canada! Meet Canadian girls and women for friendship, dating or relationships."

It had been several months since the much publicized death of the Nova Scotia teen in April following a suicide attempt. Her parents said she was the victim of an alleged sexual assault when she was 15, and then bullied about it for more than a year.

The online backlash over the misuse of Parsons's image prompted the company and Facebook to apologize and pull the ads.

It's very possible the images of numerous other Canadians were also swept up in 2012 as part of a digital art project hosted at

The website was designed to look like an online dating service and included fake profiles based on images and data taken from one million Facebook users who had their privacy preferences set to public.

The partners behind the project, Paolo Cirio and Alessandro Ludovico, say it was easily put together because of a process called data scraping. They wrote a simple program that automated the collection of Facebook data that was publicly available to anyone and everyone.

"Facebook tries to expose as much as it can, they want search engines indexing that personal information (that isn't marked private)," says Cirio.

"And because of that it was pretty easy to harvest that data."

The website has since been taken down and Cirio says any users who found their photos or data on the site were able to request that it be removed.

He says the project wasn't meant to be nefarious and was designed as a social commentary on the dangers of posting private information online.

"People are not educated and do not know the danger about publishing their private data, especially to a company's platform that makes money and has an aim to expose their personal data to generate more traffic and make more money."

Merritt says even experts find themselves making mistakes online that lead to privacy lapses. And sometimes once the mistake is made, it can't be undone.

Merritt ran into the band Arctic Monkeys while on a vacation with her daughter, who was able to pose for a photo with the rock group.

"We posted it on a social network, which is what you do. And one of her friends was really excited, tagged it with the band, and posted it to their fan page," says Merritt.

"It has subsequently ended up on other social media sites many thousands of times, so we have completely lost control of my daughter's image, and there's not much we can do about it. And it's kind of our own fault."

Luckily, there was nothing embarrassing about the photo, otherwise it could've been much worse.

"You've heard the stories where kids have an unfortunate or embarrassing image, and adults too, and it becomes an Internet meme where people make changes to it (and make fun of it)," Merritt says.

There's even a chance that a photo uploaded to a social network could potentially be used in a way you didn't originally intend by the platform itself.

"You know from the end-user licenses of popular social networks that they do retain the rights to do things with your images," says Merritt.

For example, Facebook's policy states: "for content that is covered by intellectual property rights, like photos and videos (IP content), you specifically give us the following permission, subject to your privacy and application settings: you grant us a non-exclusive, transferable, sub-licensable, royalty-free, worldwide license to use any IP content that you post on or in connection with Facebook (IP license)."

As for the odds of users finding that their photo has been stolen and used in an advertisement on Facebook, manager of privacy and safety Nicky Jackson Colaco says "statistically it's very, very small." She advises that should it happen to a user, they should click on the Report button to have it resolved.

"If you believe that your copyright has been violated — either your photo or a photo that you took and someone is using that — if you report that to us we're definitely going to take the appropriate action, so we want to hear about those cases and to make sure that we're really responsive," says Colaco.

"(Parsons's) case in particular was a very interesting case because it was a violation of our policies and it was also an advertiser not based in the U.S. or Canada, who had chosen that photo at random to use and it was just very, very unfortunate. We felt very badly that that happened but we were able to rectify that situation."

Related on HuffPost:

Loading Slideshow...
  • Making An Impersonal Announcement

    Changing your Facebook status is now part of the engagement ritual. However, it's not the way to share the news of your major life decision with close friends and family members. Do you want the people you care about feel as important to you as your random ex-coworker or your third grade classmate? Then make sure they find out about your engagement in a more personal way than those random "friends" will.

  • Broadcasting Your Bling

    I understand how giddy newly-engaged women might feel when sporting some new hardware. But every time I see an album of "The Ring," a profile pic that shows a close-up of just your diamond or an image of you brandishing your bauble in an over-the-top pose, all it says is that you care more about your bling than you do your dearly beloved. One photo of the rock, if you must share, will suffice.

  • Constantly Counting Down

    Please, don't be the person who updates his or her Facebook status every 24 hours to, "Only 438 days until I GET MARRIED" -- and then proceeds to continue in a similar fashion for the next 437 days. The same goes for marking the hours until pre-wedding events like showers or bachelor/bachelorette parties and announcing minor marriage milestones post-wedding. Getting through your first month of marriage is not an accomplishment. Update me about how you're doing in a year.

  • Plugging Your Registry

    Your registry information belongs in one place and one place only: on your wedding website. Posting the links on Facebook and Twitter gives the impression that you expect people who weren't invited to your wedding to buy you something. Also, newsflash: taking pictures of your gifts as they pile in and then saying "thank you" to the giver via status update is not a real thank you.

  • Posting Unwanted Updates

    I get it: you're planning your wedding. You're going to taste cakes, pick out chairs and choose your reception song list. You don't need to illustrate all of this with Instagram pictures of dirty forks and empty venue spaces or share a screenshot of your iTunes wedding playlist. Also, if you choose not to invite borderline close friends to your pre-wedding events (like the bachelorette or bridal shower), try not to flaunt their exclusion in your newsfeed: I have a friend who learned she wasn't invited to her law school pal's shower when the friend posted a photo of the invitation, which she'd never received. And, finally: refrain from giving instructions about how to get to the church via status update. Not all of us are going to your wedding -- and Facebook is not your personal message board.

  • Forcing Unnecessary "Likes"

    Requiring your guests to "like" a wedding fan page you've created for your Big Day or asking people to RSVP to a Facebook invite (when you've also sent out traditional invites) comes off as pandering for virtual attention. I already sent in my reply card, and I even drew a smiley face on it, so why is an e-tally necessary?

  • Changing Your Status Mid-Wedding

    I know this might sound crazy, but try to take a Facebook hiatus on your Big Day. When alerting your social network of your transformation from "Engaged" to "Married" is the first thing you want to do after saying "I do," those of us <em>in</em> your social network think you need to get your priorities straight. Put your iPhone on lockdown, okay?

  • Flooding Friends' Feeds With Wedding Photos

    There is no logical reason to clog Instagram with upload after upload of wedding photos -- especially if they're photos you took <em>of</em> your wedding photos with various filters applied -- or to post all of your wedding photos to Facebook in multiple albums. (Ditto on engagement photos. Seriously, no one wants to see those except maybe your parents.) Yes, you look pretty. Yes, weddings are joyous times. But, do you really need to prove how happy you are by putting every detail of your Big Day on display? Buy a physical wedding album like people did in the olden days and relive your wedding whenever you want to -- without making everyone else do so.

  • Honeymoon Live-Blogging

    Look, I don't need to know about your couples' massage, mai tais or romantic dinner on the beach via Twitpics and status updates. Enjoy your damn honeymoon!

  • Staying Bridal In Your Profile

    If you're still using your wedding photo as your profile pictures for months -- or worse, years -- after your wedding day, then, seriously, I'm worried about you. While this isn't as annoying as continual wedding updates, it perpetuates the idea that getting married is the most important life event ever -- and the most significant thing about you. Enjoy your wedding, get excited about your wedding, but don't let your wedding define who you are, during or after the Big Day.