Annotation of Decision and Order FTC v. Facebook 2011

Annotation by Christian Nossokoff


This decision and order by the FTC lays out what Facebook is required to do.

Facebook must let consumers know exactly what information is being collected and what inforamtion will be disclosed. Instructions on how to control privacy options must be provided. 

The extent of which users' information can be used by third parties must be disclosed and the consent of the user must be collected.

 If an account is deleted, within 30 days the information that a user has deleted, must be inaccesible.

A dedicated employee and/or department is to be implemented at Facebook specifically regarding privacy policy. Privacy risk assessment must be included in employee training and on product design, development and research.

 And most importantly, any changes to the privacy policy must be explicitly expressed to the user as soon as they go into effect.



FEDERAL TRADE COMMISSION v. FACEBOOK INC., Decision and Order, Federal Trade Commission. Web. 30 Mar. 2016.