Facebook verweigert die Herausgabe der gespeicherten Daten

Facebook hat eine neue Email an alle Nutzer verschickt, die auf die Herausgabe der von ihnen gespeicherte Daten bei Facebook warten. Darin kündigen sie an, keine Daten mehr heraus schicken zu wollen und verweisen lieber auf das Download-Tool, mit dem man sich die Daten auf den PC herunterladen kann. Die Idee ist gut, da sie Versandkosten spart und die Daten halbwegs maschinenlesbar sind.

Das Problem hierbei ist nur: Es werden nicht alle gespeicherten Daten angeboten! Waren schon die Daten, die als PDF auf einer CD verschickt wurden nicht vollständig, so sind die Daten im Download-Tool noch unvollständiger.  Zum Beispiel sind weder in der PDF, noch im Download-Tool die Daten über die angeklickten Like-Buttons enthalten. Aber wurden in der PDF noch Daten zu den Logins, gespeicherten Kreditkarten-Daten und noch vielem mehr gemacht, so fehlen viele der Daten im Download-Tool. Das kann man leicht selber vergleichen, in dem man sich mal diese Übersicht [PDF] ansieht.

Hier ist mal Email von Facebook im Wortlaut:

Re: Personal Data Requests
15.10.2011 02:14

Hello,

We have received your request for information about your personal data held by Facebook Ireland (“Facebook”). In regards to your request for details about the way your personal data are being handled by Facebook, we encourage you to have a look at the Privacy Policy (also called “Data Use Policy”), which provides for a description of:

• the categories of data being processed by Facebook,
• the personal data that Facebook receives from Facebook members,
• the purpose or purposes of the processing of such data,
• the source or sources(s) of the data, if known, and
• the recipients or categories of recipients to whom Facebook members’ personal data are or may be disclosed.

The Privacy Policy is available for view at https://www.facebook.com/about/privacy/.

We have included for your convenience the direct links to sections that refer to the categories of data we collect, the way we process them and the recipients of your data:

• We comprehensively disclose the categories of data processed and provide a description of the personal data constituting such data in the “information we receive about you” section of our Privacy Policy.

• We provided information as to how we process the personal data we collect in the “how we use the information we receive” section of our Privacy Policy.

• We provide our users with detailed and visually illustrated information about the categories of recipients to whom the data may be disclosed in the “sharing with other websites and applications” section of our Privacy Policy. It should be stressed that we never share user’s personal data with advertisers.

We have built a convenient self-service tool to offer people who use Facebook the opportunity to access the personal data we hold about them in accordance with the provisions of EU Directive 95/46/EC.

By offering this tool we are able to give you immediate access to your data at any time free of charge. We have included all the data that we believe necessary to comply with the requirements of data protection law in this download.

As you may know, we are currently working with the Irish Data Protection Commission to review various aspects of our service including our response to subject access requests. If we make any changes to the data provided in response to such requests as a result of this review, then our self-service tool will be amended accordingly. In that event, we will notify you again on completion of the review and you may wish to download your data again at that time.

Please note that this tool provides you with data that is currently held in your profile and does not generally include historic log records. We are examining the extent of the log records that should also reasonably be provided in response to a subject access request as part of the review by the Irish Data Protection Commission and will provide further information on the outcome of this consideration in due course. Also please note that you can check in your account settings under “Payments” to ascertain whether we have your credit card information stored, and you may choose to change or delete it.

You can access the self-service data access tool by clicking “Download a copy of your Facebook data” at the link below:

https://www.facebook.com/settings.

It is important to note that we have several measures in place to ensure the security of your information. Also, we require you to confirm your identity to complete the process. You will not be able to access the downloaded information until you have completed the security check.

Please note that your downloaded file may contain sensitive information. You should keep it secure and take precautions when storing, sending or uploading it to any other services.

Remember: You can also access your personal data anytime by logging in to Facebook. When you log in, you can correct, change or delete your information.

If you are having trouble logging in to your account, please visit:
http://www.facebook.com/help/?page=174

Thanks for contacting Facebook,

Facebook Ireland User Operations – Data Access Request Team

europe-v-facebook.org empfiehlt jetzt, sich bei der irische Datenschutzkommission zu beschweren und haben auch dafür eine Schritt-für-Schritt-Anleitung erstellt.

Ich werde jetzt erstmal die Email an Facebook beantworten und klar stellen, dass ich mit dem den Daten-Umfang aus dem Download-Tool nicht zufrieden bin und ich eine umfassende Auskunft über meine gespeicherten Daten innerhalb der 40-Tage-Frist haben möchte. Die 40-Tage-Frist für Facebook läuft übrigens in meinem Fall am 31.10.2011 ab.

Wie sieht es bei euch aus? Habt ihr auch eine Anfrage an Facebook geschickt?

Update (26.10.2011): Hier gibt es einen Muster-Brief zur Beschwerde bei Facebook.