EU regulator challenges Facebook changes

16:00, Nov 24 2012
Facebook is proposing to combine user data with that of recently acquired photo-sharing service Instagram, and will loosen restrictions on emails between members of the social network.
CHALLENGED: Facebook will soon combine user data with its photo-sharing service Instagram. The move is being challenged by one European regulator.

Parts of Facebook's proposed new privacy policy conflict with European law, a key regulator says, as he moves to give users in the European Union more power to block the sharing of their data with the company's affiliates such as Instagram.

Regulators alerted Facebook about the problem shortly after the company announced major changes on Wednesday (local time) in how it will treat users' personal data, said Gary Davis, deputy data protection commissioner in Ireland. His office oversees Facebook operations for the European Union because the company's European headquarters is in Dublin.

The proposed policy also drew criticism from American privacy advocates, who said that the changes would make more data available to advertisers without users' explicit consent, in violation of last year's consent decree between Facebook and the Federal Trade Commission. The agreement stemmed from complaints about the company's handling of personal data.

"Facebook is not really telling users what this means and how this is going to work," said Jeff Chester, executive director of the Center for Digital Democracy. His group is planning to join the Electronic Privacy Information Center in complaining to the FTC about the proposed Facebook policy changes. The agency declined to comment on Friday.

In Ireland, Davis expressed confidence that the company would make revisions giving European users the right to explicitly accept or reject data-sharing with affiliates such as Instagram. Facebook acquired the company for US$1 billion in April, but it remains a separate legal entity.

"We've already engaged with Facebook," Davis said. "We expect Facebook to be reverting [to previous policies] on these issues."


When the changes to the policy were announced, public attention focused on a related shift that would eliminate a system allowing the company's users to vote on proposed new policies. But Irish regulators were more concerned about how the company handles personal data.

Facebook spokesman Andrew Noyes said in an e-mail on Friday: "As our company grows, we acquire businesses that become a legal part of our organization [sic]. Those companies sometimes operate as affiliates. We wanted to clarify that we will share information with our affiliates and vice versa to help improve our services and theirs."

In October, data regulators from Europe and several other regions sharply criticised Google for revisions to its privacy policy after the company began allowing more extensive tracking of personal information across a range of its services., such as Gmail, YouTube and the Chrome browser.

- Washington Post