Facebook is facing legal action in France after the country's data protection regulator found the company has fallen short of many data protection requirements stipulated under French law.
The French National Commission of Technology and Liberties (CNIL), which is in charge of the protection of the protection of personal data, has published "a long indictment against the manner in which Facebook collects and uses to data of its 30 million French users", according to French newspaper Le Monde.
The alleged breaches include not getting the appropriate consent from members to use their personal information to serve targeted ads, accepting and retaining users' medical data which was found to be "too sensitive" - and not explicitly saying what it does with information on users' sexuality.
Facebook has also been criticised for not informing French users clearly enough that all their data is sent to the United States, which the commission claims is based on the now-defunct Safe Harbour agreement.
It has also criticised the social network for not ensuring members use strong passwords, which may also constitute a breach of French law, as well as not giving sufficient information for cookie consent and storing the IP addresses of users for an excessive amount of time.
Facebook now has three months to rectify these shortcomings or apply for an extension to that deadline. Should the company fail to do either of these things it will face sanctions, Le Monde reports.
For its part, Facebook told the newspaper: "The protection of privacy is a priority for Facebook. We are confident that our service conforms to European law with regard to the protection of data. We have, of course, put ourselves in contact with the CNIL to discuss the issues raised."
-
Two years on from its Series B round, Hack the Box is targeting further growthNews Hack the Box has grown significantly in the last two years, and it shows no signs of slowing down
-
Dragging your feet on Windows 11 migration? Rising infostealer threats might change thatNews With the clock ticking down to the Windows 10 end of life deadline in October, organizations are dragging their feet on Windows 11 migration – and leaving their devices vulnerable as a result.
-
UK businesses patchy at complying with data privacy rulesNews Companies need clear and well-defined data privacy strategies
-
Data privacy professionals are severely underfunded – and it’s only going to get worseNews European data privacy professionals say they're short of cash, short of skilled staff, and stressed
-
Four years on, how's UK GDPR holding up?News While some SMBs are struggling, most have stepped up to the mark in terms of data governance policies
-
Multicloud data protection and recoverywhitepaper Data is the lifeblood of every modern business, but what happens when your data is gone?
-
Intelligent data security and managementwhitepaper What will you do when ransomware hits you?
-
How to extend zero trust to your cloud workloadsWhitepaper Implement zero trust-based security across your entire ecosystem
-
The threat prevention buyer's guideWhitepaper Find the best advanced and file-based threat protection solution for you
-
Why The Matrix offers valuable lessons on data sovereignty for channel partnersIndustry Insight Two decades on, there's much that the Matrix series can teach channel partners about data sovereignty
