Facebook: The law reasonably states you can't have all your data

Facebook: The law reasonably states you can't have all your data

Summary: Facebook has explained that it won't hand over all your personal data because that's how the law works. The company says it is also complying with the Irish Data Protection Commissioner.


Update: Max Schrems argues Facebook is wrong. Europe versus Facebook: the law protects program logic, not data.

After making 22 complaints regarding Facebook's various practices, the Austrian group Europe versus Facebook stumbled upon an important tidbit: Facebook says it is not required to give you a copy of some of your personal data if it deems doing so would adversely affect its trade secrets or intellectual property. I followed up with Facebook and learned the company insists the law places "reasonable limits" on the data that has to be provided.

On its website, Europe versus Facebook shows how to request a copy of your personal data on the social network (see how Reddit overwhelmed Facebook with data requests). It explains that because of Ireland's 1988 Data Protection Act (DPA), Facebook has to send you your data on a CD within 40 days of a request.

Max Schrems of Europe versus Facebook managed to receive a reply to his request. It was in the form of a CD-ROM storing 1,222 pages. As he looked through the ridiculously long document however, Schrems noticed that important information was missing, and so he contacted Facebook again asking for the remaining data. Facebook explained that the law includes "an exception to subject access requests where the disclosures in response would adversely affect trade secrets or intellectual property."

When I followed up with the social networking giant, I learned that Facebook believes it gave everything to Schrems that it had to by law. The company argues that it is doing everything it legally can to respond to Schrems requests.

"Facebook has sent over 1,000 pages of data to Mr Schrems in response to his subject access request and we believe that this meets the requirements of EU data protection law," a Facebook spokesperson said in a statement. "It is therefore nonsense to say that we are not willing to provide him with his personal data. Mr Schrems was not happy with all of this data that we provided to him and has asked for a range of additional data items. We replied to him to explain fully the relevant provisions in Irish data protection law that place some reasonable limits on the data that has to be provided. We are cooperating fully with the Irish Data Protection Commissioner who will come to a view on Mr Schrems' complaint in due course."

Last month, Billy Hawkes, Ireland's Data Protection Commissioner, announced that he will conduct a privacy audit of Facebook's activities. Since Facebook's international headquarters is in Dublin, all users outside the US and Canada could be affected by his findings.

His office decided to investigate the company after Europe versus Facebook's 22 complaints were covered repeatedly in the media. It will take quite a while for the Irish Data Protection Commissioner to go through all of the complaints, but it appears that Facebook remains confident he will not find any problems.

See also:

Topic: Social Enterprise

Emil Protalinski

About Emil Protalinski

Emil is a freelance journalist writing for CNET and ZDNet. Over the years,
he has covered the tech industry for multiple publications, including Ars
Technica, Neowin, and TechSpot.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.


Log in or register to join the discussion
  • RE: Facebook: The law reasonably states you can't have all your data

    All your data are belong to us ;-)
    • RE: Facebook: The law reasonably states you can't have all your data

      @tonymcs@... It's real funny that a man at 25 had about one billion peoples personal data and made billion dollars with it. I still believe as you grow fast you can drop fast...<br>Time changes the environment and there is new projects can overcome earlier ones like fb...
      <a href="http://www.kecioyun.com/" rel="muse" title="oyun">oyun</a>
    • RE: Facebook: The law reasonably states you can't have all your data

      @tonymcs@... Facebook is making themselves look pretty pathetic/evil/manipulative here.

      But I have to ask: Who the heck are these people who are putting deeply private data into their facebook accounts?

      Are they also doing drug deals in the middle of casinos where everyone in the universe knows a hundred cameras are recording?
  • You are the product

    You're not paying them, someone else is. Your data is being sold for money either directly or indirectly via adverts.

    Sooner or later you wake up and abandon these 'social' sites, MySpace being a classic example.
  • Crazy European Group

    Do Europeans really think you get something for nothing? Facebook isn't a right. It's a choice people willingly make. If you want to control all your data, buy a domain and a hosting package and post however much or little you want.

    No one can seriously claim that they don't understand that in exchange for a free facebook account facebook sells member information to drive revenue.
    • RE: Facebook: The law reasonably states you can't have all your data

      @croberts: What they wanted is to know what Facebook knows about themselves and get copies of their data that they have on Facebook. Is it unreasonable for them to ask?<br>If there's supposed to be a working market, you're actually supposed to be able to know how the alternatives work and to be able to switch at will.<br><br>BTW: Do you say the same about that car tracking company that keeps tracking their users AFTER they've cancelled the service? (Those details are hidden somewhere in some EULA that I know even you wouldn't read word-for-word.)
      • RE: Facebook: The law reasonably states you can't have all your data


        Um, no ,that was OnStar and they announced publicly they were going to do it.
  • Very simple solution.

    • RE: Facebook: The law reasonably states you can't have all your data


      Are really you sure no other person on the planet has put your name, address, phone number, a photo of you (with a tag), or some other information on Facebook?