top | item 35384236

(no title)

steveridout | 2 years ago

GDPR obliges them to delete your data upon request. But I'm not sure how well Facebook/Meta complies with this. This post from 4 years ago doesn't sound encouraging: https://ruben.verborgh.org/facebook/ Does anyone know if they've improved since then?

discuss

order

_pjx9|2 years ago

I'd deleted my Facebook account years before, but after that begrudgingly signed up to Facebook Messenger because my friends insisted on using it (which are separate accounts apparently).

At some point, a couple of years ago, I decided enough was enough (probably when they forced me to accept some new anti-privacy EULA which otherwise blocked me from using Messenger Lite).

There was no delete account option in the app that I can remember. I searched and searched for at least an hour. Facebook's support site was a labyrinth of circular links that edged around actually deleting my account. I had no Facebook account, so I couldn't log in to delete it on the website's account settings.

I just wanted an email I could send the request to. I finally found one for a data protection officer or some sort. Sent them an email, got another one back redirecting me to the website. Obviously that wasn't helpful, so I sent them one of those GDPR deletion templates.

Didn't hear back, and checking a few months later, my account was still accessible.

londons_explore|2 years ago

The EU has now made clear that this isn't compliant. A data removal request does not have to be via a form - it can be to any employee via any communication method, and does not have to use any special legal wording. [1]

You can show up at one of their offices and tell their janitor, and they should still comply.

That's why most companies now train every employee how to handle users requesting deletion (usually by forwarding the request to someone whose job it is to action them).

[1]: https://medium.com/@sandeepbhalothia/a-b27d3f83ee73#:~:text=...

piva00|2 years ago

If you have documentation about your process (which the email sent to their DPO should be enough) get in contact with the Data Protection Agency of your country for them to start procedures on your behalf.

I've got some help from Sweden's IMY for a similar case, asked for the removal of my data by emailing a GDPR template, got no answer and no resolution by the company in a few months and contacted IMY who solved it (and fined them).

freetanga|2 years ago

Put a complaint in your national GDPR office.

londons_explore|2 years ago

Data which is not personally identifiable does not fall under the GDPR. Meta will use this excuse for most data which isn't tied to an active facebook account.