4 ms·

Less than 1 million dollars? Is this a joke?

• jimnotgym 8y ago
  It was pre-GDPR so that is the max fine available
  • noir_lord 8y ago
    Yep. If they fuck up next time it could cost 4% of Global Revenue - Quick google says that's ~1.7bn dollars.
• na85 8y ago
  I bet Mark spends that much on neckties.
  • joshenders 8y ago
    s/neckties/hoodies/g He doesn’t wear neckties except for at senate judiciary hearings...
• multjoy 8y ago
  £500k is the statutory maximum for the Data Protection Act.
• andyana 8y ago
  I thought we established that the mechanism to secure your account was available the whole time, only users were too stupid to use it.
  • aeternus 8y ago
    Right, how is sharing a user's friend list, especially when that user has provided explicit permission, worthy of a fine? Under that premise, Google should immediately be sent a cease & desist as they allow users to share access to all e-mails and e-mail history with 3rd parties without any fine-grained access control. Because of this, many users are providing full e-mail scan access to questionable 3rd party apps like calendars/trip planners/marketing tools. This is a significant security issue not just from a privacy standpoint, but also given that almost all sites allow password resets via email. It's just a matter of time until one of those gets hacked or starts siphoning off & saving user e-mail en-masse. This Facebook issue also pales in comparison to browser plugins that request access to view & modify any website. Another place where lack of fine-grained access controls have forced both plugin designers & users into a terrible security model.