Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

FTC Imposes $5B Penalty and Sweeping New Privacy Restrictions on Facebook

ftc.gov

Post reply on HN
Print view View original

151–160 of 221 posts

Re: FTC Imposes $5B Penalty and Sweeping New Privacy Restrictions on Facebook

#151

Post by almost_usual »

djsumdog wrote: post #72
jawns wrote: post #8

A lot of the terms of the settlement deal with organizational changes, but when you look at the very specific privacy restrictions that Facebook agreed to, it's really, really problematic stuff: * Facebook is prohibited from using telephone numbers obtained to enable a security feature (e.g., two-factor authentication) for advertising; * Facebook must provide clear and conspicuous notice of its use of facial recognit…

> So from Facebook's perspective, this is probably a big win. $5 billion is a lot, but Facebook is huge. Even considering, it's probably not pocket change for them, but they are getting a benefit from it for sure. They are buying public opinion. "Look at us..we took a big fine and agreed to respect your privacy .. you can trust us now." It's essentially a very expensive ad, used to rebuild trust with their cattle; I…

The independent party for privacy review is a much bigger deal than the fine. This out of Mark Zuckerberg's control now, they will be audited constantly for any product changes they make.

"As part of Facebook’s order-mandated privacy program, which covers WhatsApp and Instagram, Facebook must conduct a privacy review of every new or modified product, service, or practice before it is implemented, and document its decisions about user privacy. The designated compliance officers must generate a quarterly privacy review report, which they must share with the CEO and the independent assessor, as well as with the FTC upon request by the agency."

Re: FTC Imposes $5B Penalty and Sweeping New Privacy Restrictions on Facebook

#152

Post by ComodoHacker »

jawns wrote: post #8

A lot of the terms of the settlement deal with organizational changes, but when you look at the very specific privacy restrictions that Facebook agreed to, it's really, really problematic stuff: * Facebook is prohibited from using telephone numbers obtained to enable a security feature (e.g., two-factor authentication) for advertising; * Facebook must provide clear and conspicuous notice of its use of facial recognit…

Plus they'll continue to do all these things with users from other countries.

Re: FTC Imposes $5B Penalty and Sweeping New Privacy Restrictions on Facebook

#153

Post by gowld »

tssva wrote: post #120
watwatinthewat wrote: post #26

I don't think I agree with Facebook getting a bigger fine than Equifax. I put my own information on FB. Equifax compiled information on me without my explicit consent. Both sets of data got into hands they shouldn't. I realize that misses FB willfully doing what they did and Equifax not intending to be hacked, but for me my consent is equal or more important than what the holders of the data did after they had it. Le…

All credit agreements I have read contain sections specifically allowing reporting of information to credit agencies, so you have in fact explicitly allowed collection of your information.

That's irrelevant. Facebook's stuff is their TOS also. The point is that at some point the TOS is unconscionable.

Re: FTC Imposes $5B Penalty and Sweeping New Privacy Restrictions on Facebook

#154

Post by mirimir »

mda wrote: post #53
swebs wrote: post #18

>Facebook must exercise greater oversight over third-party apps, including by terminating app developers that fail to certify that they are in compliance with Facebook’s platform policies or fail to justify their need for specific user data; >Facebook is prohibited from using telephone numbers obtained to enable a security feature (e.g., two-factor authentication) for advertising; >Facebook must provide clear and con…

Which of the items in this list currently applies to Google or Microsoft?

>Facebook must exercise greater oversight over third-party apps, including by terminating app developers that fail to certify that they are in compliance with Facebook’s platform policies or fail to justify their need for specific user data;

That applies to Google and Apple, no? To apps in their stores.

Re: FTC Imposes $5B Penalty and Sweeping New Privacy Restrictions on Facebook

#155

Post by [deleted] »

simonh wrote: post #123
jawns wrote: post #8

A lot of the terms of the settlement deal with organizational changes, but when you look at the very specific privacy restrictions that Facebook agreed to, it's really, really problematic stuff: * Facebook is prohibited from using telephone numbers obtained to enable a security feature (e.g., two-factor authentication) for advertising; * Facebook must provide clear and conspicuous notice of its use of facial recognit…

It's completely ridiculous that the FTC is in a position where it has to impose restrictions like this in an ad-hoc case-by-case basis. In this case specifically to Facebook. Maybe I'm being naive, but if these activities are violations, there should be no need for facebook to agree to abide by them. They would have to anyway. Alternatively if these are specific restrictions on facebook, doesn't it imply it's ok for…

[deleted]

Re: FTC Imposes $5B Penalty and Sweeping New Privacy Restrictions on Facebook

#156

Post by pyython »

gridlockd wrote: post #124
pyython wrote: post #79

Earlier quoted context omitted.

Came here to say this! I still can't believe credit bureaus are allowed to even exist. At no time do I give them explicit permission to collect my (very) personal information, there's almost literally no way I can opt out (short of not participating in the modern financial system), their interpretation of this data has an outsized influence on my quality of life, AND they have proven themselves incompetent at protect…

You did give them explicit permission by participating in the modern financial system. That's why I keep saying all the hypothetical privacy concerns with Facebook's Libra already are reality with the current financial system. Equifax also didn't get fined because of what they were doing, but because they were negligent in handling the data. Having said that, given the importance of consumer debt in the US economy, c…

> You did give them explicit permission by participating in the modern financial system.

This at best would qualify as implicit consent. Which is very different and not sufficient. There should at the very least be a big button you have to press for every agreement you enter into that shares data with credit bureaus that clearly states that you: 1) consent to sharing all of your transaction data with credit bureaus 2) are aware of the various ways the credit bureaus might use your information 3) are aware of the potential consequences in practical terms of how this usage might impact your life 4) are informed about the way the data is stored/who has access to it/what your rights are surrounding it

I would also like to see GDPR-style "right to be forgotten" laws that apply to this data.

Re: FTC Imposes $5B Penalty and Sweeping New Privacy Restrictions on Facebook

#157

Post by ComodoHacker »

pyython wrote: post #79
zxcvbn4038 wrote: post #70

Does it bother anyone else that Facebook is being fined $5 billion while Equifax, a company with a history of anti-consumer activity and privacy violations going back decades, the company that congress was forced to enact the Fair Credit Reporting Act to contain, and who gave away all the personal information for over a hundred million people through its own negligence, was fined a mere $650 million? Do you get the i…

Came here to say this! I still can't believe credit bureaus are allowed to even exist. At no time do I give them explicit permission to collect my (very) personal information, there's almost literally no way I can opt out (short of not participating in the modern financial system), their interpretation of this data has an outsized influence on my quality of life, AND they have proven themselves incompetent at protect…

>If I'm worried about Facebook's use of my data the answer is simple: stop using Facebook.

This doesn't stop them using your data obtained from other users.

Re: FTC Imposes $5B Penalty and Sweeping New Privacy Restrictions on Facebook

#158

Post by almost_usual »

rad_gruchalski wrote: post #86

Someone I work with found this: The interesting part is in the write up from The Verge ( https://www.theverge.com/2019/7/24/20707013/ftc-facebook-set... ): > "The settlement’s $5 billion penalty makes for a good headline," FTC commissioner Rohit Chopra wrote in his dissent. "But the terms and conditions, including blanket immunity for Facebook executives and no real restraints on Facebook’s business model, do not fix…

Did you read the entire FTC write up? Facebook essentially doesn't have control over how they handle privacy data anymore. I'd argue the fine is the least damaging aspect.

"As part of Facebook’s order-mandated privacy program, which covers WhatsApp and Instagram, Facebook must conduct a privacy review of every new or modified product, service, or practice before it is implemented, and document its decisions about user privacy. The designated compliance officers must generate a quarterly privacy review report, which they must share with the CEO and the independent assessor, as well as with the FTC upon request by the agency."

Re: FTC Imposes $5B Penalty and Sweeping New Privacy Restrictions on Facebook

#159

Post by kodablah »

simonh wrote: post #123
jawns wrote: post #8

A lot of the terms of the settlement deal with organizational changes, but when you look at the very specific privacy restrictions that Facebook agreed to, it's really, really problematic stuff: * Facebook is prohibited from using telephone numbers obtained to enable a security feature (e.g., two-factor authentication) for advertising; * Facebook must provide clear and conspicuous notice of its use of facial recognit…

It's completely ridiculous that the FTC is in a position where it has to impose restrictions like this in an ad-hoc case-by-case basis. In this case specifically to Facebook. Maybe I'm being naive, but if these activities are violations, there should be no need for facebook to agree to abide by them. They would have to anyway. Alternatively if these are specific restrictions on facebook, doesn't it imply it's ok for…

We should separate what something does from its intended effect when having these discussions. Laws exist on the books, laws can be added, etc but that is unrelated to enforcement and credibility and continued sector/business growth.

Re: FTC Imposes $5B Penalty and Sweeping New Privacy Restrictions on Facebook

#160

Post by robomartin »

The most important privacy enhancement they could make is nowhere to be found in this settlement:

Provide easy means for users to permanently delete all information, posts, comments and messages, as well as a setting to automatically expire and delete all if the above as desired. This should include backups.

Post reply on HN