Facebook could face a fine of upto to €100,000 (£87,000) after an Austrian law student discovered the social networking site held 1,200 pages of personal data about him, much of which he had deleted.
Max Schrems, 24, after attending a lecture by a Facebook executive while on an exchange programme at Santa Cara University, California, decided to ask Facebook for a copy of his data.
Schrems was shocked to find messages and information that he believes were deleted from his profile, in the the CD he received from Facebook. The CD also contatined data of rejected friend requests, incidences where he “defriended” someone, log of all Facebook chats he had, as well as names of all the people he “poked”. It also contained a list of photos he had detagged of himself, events he had attend, and those he hadn’t replied to, and much more.
He decided to log a list of 22 separate complaints with the Irish data protection commissioner, after discovering that European users are administered by the Irish Facebook subsidiary.
A spokeswoman for the commissioner confirmed its officers would be investigating alleged breaches raised by Schremas as part of the first audit to be carried out new week. If the commissioner decides to prosecute, and if Facebook or any employees are found guilty of data protection breaches, the maximum penalty is a fine of €100,000.
Schrems has also set up a campaigning website to encourage others to follow his lead.
{ 1 comment }