> revealing which specific services your customers used - for example, whether they read a page about Kennedy or about Oswald If you authenticate with OAuth, t

> revealing which specific services your customers used - for example, whether they read a page about Kennedy or about Oswald If you authenticate with OAuth, the OAuth server doesn't get to know what particular subresources you visit. It only gets to know which URL initiated the authentication (and whether it tracks even that is an open implementation question). In other words sure Wikipedia can tell government what pages you visit, but to say that this law does enable that or require that even as a side effect is pure FUD.