> Is Facebook responsible for keeping your (and your friends) data out of 3rd party hands or not? They are responsible for the activity that they directly faci

> Is Facebook responsible for keeping your (and your friends) data out of 3rd party hands or not? They are responsible for the activity that they directly facilitate on their own platform. They have legal authority over the interactions they directly engage in (ie with users). They have no say (legally or otherwise) over what goes on outside the bounds of their own platform and thus no responsibility for it. Regulators, not individual actors, are the ones with authority over the broader ecosystem. GDPR and CCPA are examples of such. What's next, should Google be permitted to publish a ToS forbidding access to their services with non-Chrome browsers and then legally pursue other browser makers for facilitating the violation of their ToS?