Yes but surely there are some legal issues abound here? these social networking sites are facilitating the data trawling applied by phishers and identity frauds

Yes but surely there are some legal issues abound here? these social networking sites are facilitating the data trawling applied by phishers and identity fraudsters. I'm currently researching the PCI DSS for my employer, and I'm seeing this as the next potential milestone in security compliance. It's not just a matter of the general public becoming aware of the risks, like they have with credit card info, the users of the data must set in place secure standards to deal with identity data.