\n
![](\"https:\/\/i0.wp.com\/rsoftsolution.com\/blog\/wp-content\/plugins\/RSSPoster_PRO\/cache\/c4522_shutterstock_186292982a.jpg?w=640&ssl=1\")
<\/p>\n
\n<\/p>\n
Another privacy-related fine for Facebook in Europe: The Spanish data protection regulator has issued a \u20ac1.2M (~$1.4M) fine against the social media behemoth for a series of violations regarding its data-harvesting activities.<\/p>\n
Spain\u2019s AEPD said an investigation into how Facebook collects, stores and uses data for advertising purposes found it is doing so without obtaining adequate user consent.<\/p>\n
It says it identified two serious infringements and one very serious infringement of data protection law \u2014 with the total sanction breaking down to \u20ac300,000 for each of the first breaches and \u20ac600,000 for the second.<\/p>\n
The regulator found Facebook collects data on ideology, sex, religious beliefs, personal tastes and navigation \u2014 either directly, through users\u2019 use of its services or from third party pages \u2014 without, in its judgement, \u201cclearly informing the user about the use and purpose\u201d.<\/p>\n
Not obtaining express consent of users to process sensitive personal data is classified as a very serious offense under local DP law.<\/p>\n
Facebook\u2019s use of web browsing cookies was also found in violation of privacy laws, with the regulator saying it confirmed users are not informed that their information will be processed through the use of cookies when they are browsing non-Facebook pages that contain Facebook\u2019s \u2018Like\u2019 button social plug in \u2014 noting that while some of the use of this data is declared as being for advertising, other use is \u201csecret\u201d, i.e. not disclosed by the company.<\/p>\n
\u201cThis situation also occurs when users are not members of the social network but have ever visited one of its pages, as well as when users who are registered on Facebook browse through third party pages, even without logging on to Facebook. In these cases, the platform adds the information collected in said pages to the one associated with your account in the social network. Therefore, the AEPD considers that the information provided by Facebook to users does not comply with data protection regulations,\u201d it noted.<\/p>\n
The regulator is also unhappy that Facebook does not delete harvested data once it has finished using it \u2014 saying it had been able to verify Facebook does not delete web browsing habits data, but \u00a0in fact \u201cretains and reuses it later associated with the same user\u201d.<\/p>\n
It also found this to be true even when the company had been explicitly requested to delete data by a user.<\/p>\n
\u201cRegarding data retention, when a social network user has deleted his account and requests the deletion of the information, Facebook captures and treats information for more than 17 months through a deleted account cookie. Therefore, the AEPD considers that the personal data of the users are not canceled in full or when they are no longer useful for the purpose for which they were collected or when the user explicitly requests their removal, according to the requirements of the LOPD [local data protection law], which represents a serious infringement,\u201d it said.<\/p>\n
The AEPR, which noted it liaised with other DPAs \u2014 in Belgium, France, Germany (Hamburg) and the Netherlands, which also have their own separate investigations into these issues, initiated following Facebook\u2019s 2015 TCs change \u2014 said Facebook\u2019s existing privacy policy was judged to contain \u201cgeneric and unclear terms\u201d, and to \u201cinaccurately\u201d refer to the use it will make of the data it collects.<\/p>\n
The regulator asserted that a Facebook user \u201cwith an average knowledge of the new technologies does not become aware of the collection of data, nor of their storage and subsequent treatment, nor of what they will be used\u201d.<\/p>\n
It also points out that unregistered Internet users would not be unaware that the social network collects their browsing data \u2014 something that has\u00a0already got Facebook into trouble<\/a> with other European DPAs<\/a>.<\/p>\n Commenting on the regulator\u2019s action, a Facebook spokesperson told us the company intends to appeal the decision, while also noting that its European business is (currently) regulated under Irish data protection rules, where its EU HQ is sited.<\/p>\n It provided the following statement:<\/p>\n We take note of the DPA\u2019s decision with which we respectfully disagree. Whilst we value the opportunities we\u2019ve had to engage with the DPA to reinforce how seriously we take the privacy of people who use Facebook, we intend to appeal this decision. As we made clear to the DPA, users choose which information they want to add to their profile and share with others, such as their religion. However, we do not use this information to target adverts to people.<\/p>\n Facebook has long complied with EU data protection law through our establishment in Ireland. We remain open to continuing to discuss these issues with the DPA, whilst we work with our lead regulator the Irish Data Protection Commissioner as we prepare for the EU\u2019s new data protection regulation in 2018.<\/p>\n<\/blockquote>\n The size of the AEPR fine is of course a mere pinprick for Facebook whose 2016 revenue was $27.64BN. So really its appeal against the fine is about the company trying to bat away any perception that it violates privacy by refuting the substance of the violations being asserted here.<\/p>\n But seen through the prism of stricter incoming EU data protection rules, under the new GDPR regime<\/a>\u00a0which comes into force next May, there are certainly serious financial considerations for Facebook\u2019s business pertaining to privacy \u2014 as the new EU regime includes a far larger stick to beat companies that are judged to have violated data protection rules while also tightening up privacy rules by, for example, expanding the definition of personal data and giving EU citizens the right to ask for their data to be deleted.<\/p>\n Companies will be facing fines of up to 4% of their global annual turnover for privacy violations under GDPR. So, in Facebook\u2019s case, privacy-related fines could start to scale to over a billion dollars. And penalties of that size aren\u2019t something the tech giant can too often and too easily sweep under its revenue carpet.<\/p>\n Even as\u00a0GDPR strengthens the consent requirements for processing personal data, and expands the risk of holding and processing lots of personal data.<\/p>\n In addition, a company like Facebook, which processes data across multiple EU Member States\u2019 territories, may find the new regulation creates a situation where it faces more concerted action from other DPAs, i.e. beyond their local data authority where they\u2019ve established a European base. So, in Facebook\u2019s case, it may not so easily be able to claim to be only under the jurisdiction of the Irish DPA. And in Europe, it\u2019s fair to say that some DPAs are decided more pro-privacy than others.<\/p>\n Asked about its GDPR preparations, Facebook previously told us it has designated a cross-functional team to \u201cfully analyze the legislation and help us understand what this would mean from a legal, policy and product perspective\u201d \u2014 saying this is \u201cthe largest cross functional team in the history of the\u00a0Facebook<\/span>\u00a0family\u201d.<\/p>\n It is also now looking to recruit a data protection officer \u2014 a position mandated under GDPR.<\/p>\n \u201cAhead of next May we are working with our product, design and engineering teams to enhance existing products and build new products in a way that simultaneously provides an intuitive, user-centric experience and permits us to meet our obligations under the\u00a0GDPR,\u201d added Stephen Deadman, Facebook\u2019s deputy chief global privacy officer, in a statement.<\/p>\n <\/p>\n Featured Image: Twin Design<\/a>\/Shutterstock<\/a><\/small><\/p>\n Article source: http:\/\/feedproxy.google.com\/~r\/techcrunch\/social\/~3\/mELG2OWSTxg\/<\/p>","protected":false},"excerpt":{"rendered":" Another privacy-related fine for Facebook in Europe: The Spanish data protection regulator has issued a \u20ac1.2M (~$1.4M) fine against the social media behemoth for a series of violations regarding its <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[3],"tags":[10,7,14,15,6,12,11],"class_list":["post-9129","post","type-post","status-publish","format-standard","hentry","category-latest-update","tag-computer-news","tag-downloads","tag-microsoft-download-news","tag-networking-updates","tag-technology-update","tag-wordpress-plugin-download","tag-wordpress-theme-download"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n