Annotation of Decision and Order FTC v. Facebook 2011
This is the old version of the H2O platform and is now read-only. This means you can view content but cannot create content. You can access the new platform at https://opencasebook.org. Thank you.
Annotation by Christian Nossokoff
This decision and order by the FTC lays out what Facebook is required to do.
Facebook must let consumers know exactly what information is being collected and what inforamtion will be disclosed. Instructions on how to control privacy options must be provided.
The extent of which users' information can be used by third parties must be disclosed and the consent of the user must be collected.
If an account is deleted, within 30 days the information that a user has deleted, must be inaccesible.
A dedicated employee and/or department is to be implemented at Facebook specifically regarding privacy policy. Privacy risk assessment must be included in employee training and on product design, development and research.
And most importantly, any changes to the privacy policy must be explicitly expressed to the user as soon as they go into effect.
Citation:
FEDERAL TRADE COMMISSION v. FACEBOOK INC., Decision and Order, Ftc.gov. Federal Trade Commission. Web. 30 Mar. 2016.
This is the old version of the H2O platform and is now read-only. This means you can view content but cannot create content. If you would like access to the new version of the H2O platform and have not already been contacted by a member of our team, please contact us at h2o@cyber.law.harvard.edu. Thank you.