FTC finalizes privacy settlement with Facebook
Facebook has agreed to submit to government audits and to explicitly seek users' consent before altering privacy settings after the Federal Trade Commission finalized a settlement with the company.
The Associated Press
NEW YORK — The Federal Trade Commission (FTC) voted Friday to finalize its settlement with Facebook, resolving charges that the social network exposed details about users' lives without getting the required legal consent.
Facebook agreed to submit to government audits of its privacy practices every other year for the next two decades. The company also committed to getting explicit approval from users before changing the types of content it makes public.
The settlement, announced in November, is similar to agreements the FTC reached separately with Google and Myspace.
The FTC approved the settlement Friday after a public-comment period. It came a day after the FTC fined Google $22.5 million to resolve allegations that Google didn't comply with the earlier settlement.
Facebook didn't admit any wrongdoing in the settlement, though CEO Mark Zuckerberg conceded in November that the company had made "high-profile mistakes" on privacy over the years.
Both Facebook and Google have vast amounts of data on their users — Facebook through the things people share on the site, and Google through the searches and other things people do. Such information is valuable because it can be used to improve the lucrative targeted advertising pitches that both companies aim at users.
Over the years, Facebook has been pushing users to voluntary share more about themselves. That ultimately encourages users and their friends to spend more time on the site, which in turn allows Facebook to sell more ads.
Although Facebook boasts that it gives users a variety of software settings so they can decide which photos, links and updates to share with whom, the company changes those options on a regular basis.
Much of the FTC's complaint against Facebook centers on a series of changes that the company made to its privacy controls in late 2009. The revisions automatically shared information about and pictures of Facebook users, even if they previously programmed their privacy settings to shield the content. Among other things, people's profile pictures, lists of online friends and political views were suddenly available for the world to see, the FTC alleged.
The complaint also charges that Facebook shared its users' personal information with third-party advertisers from September 2008 through May 2010 despite several public assurances from company officials that it wasn't passing the data along for marketing purposes.
Facebook believes that happened only in limited instances, generally when users clicked on ads that appeared on their personal profile pages.
Under the settlement, Facebook must get explicit consent — a process known as "opting in" — before making changes that override existing privacy preferences. The company also may not make misrepresentations about the privacy or security of users' personal information — a broad clause that led to Google's fine on Thursday.
Violations will be subject to civil penalties of up to $16,000 per day for each infringement.
Facebook had no comment beyond a statement that it is pleased the settlement received final approval.