German court finds Facebook oversharing user data

February 12, 2018
A German court has ruled that Facebook fails to offer its users a meaningful choice about how their data is used

A German court has found Facebook is breaching data protection rules with privacy settings that over-share by default and by requiring users to give real names, a consumer rights organisation said Monday.

Under German law, personal information can only be recorded and used by a company with explicit agreement from the individual.

But Berlin judges ruled Facebook leaves many settings switched on by default, failing to offer users a meaningful choice about how their data is used, plaintiffs the Federation of German Consumer Organisations (VZBV) said.

"Facebook hides default settings that are not privacy-friendly in its privacy centre and does not provide sufficient information about this when users register," VZBV legal expert Heiko Duenkel said.

Judges found five different default privacy settings were illegal, including sharing location data with chat partners or making profiles available to external search engines, allowing any internet user to stumble across them.

The court also ruled eight paragraphs of Facebook's terms of use were invalid, most notably one which requires people to use their on the social network.

But it did not agree with the consumer advocates' claim that the firm's slogan "Facebook is free and always will be" was misleading.

The VZBV said users were already paying to use the site—but with access to their data, rather than cash.

Facebook could face fines of up to 250,000 euros ($306,000) per infraction if it does not fix its conditions in Germany, but the company said it would appeal the ruling.

"Our products and terms of service have changed a lot since the beginning of the case, and we are making further changes this year to our terms of use and guidelines, with a view to upcoming legal changes," a spokeswoman told AFP.

Germany is a major market for Facebook in Europe, with around 30 million of the country's 80-million strong population signed up and almost 23 million using the network every day.

Along with Austria, it is one of the only European Union nations to have translated continent-spanning rules known as the General Data Protection Regulation (GDPR) into national law ahead of a May 25 deadline.

Monday's judgement follows a December warning from Germany's competition watchdog that Facebook was abusing its dominant market position to "limitlessly" harvest data from outside websites and apps.

The social network uses its connections to third-party websites and subsidiaries WhatsApp and Instagram to collect data on its users to enable hyper-targeted advertising.

Explore further: Facebook to launch privacy center ahead of EU regulations

Related Stories

Facebook to launch privacy center ahead of EU regulations

January 31, 2018

Facebook says it will launch a new privacy center to help people understand what it does with their data as the giant social network prepares for sweeping new data protection rules in Europe designed to rein in the growing ...

Recommended for you

Technology near for real-time TV political fact checks

January 18, 2019

A Duke University team expects to have a product available for election year that will allow television networks to offer real-time fact checks onscreen when a politician makes a questionable claim during a speech or debate.

Privacy becomes a selling point at tech show

January 7, 2019

Apple is not among the exhibitors at the 2019 Consumer Electronics Show, but that didn't prevent the iPhone maker from sending a message to attendees on a large billboard.

China's Huawei unveils chip for global big data market

January 7, 2019

Huawei Technologies Ltd. showed off a new processor chip for data centers and cloud computing Monday, expanding into new and growing markets despite Western warnings the company might be a security risk.

0 comments

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.