Facebook broke Canadian privacy laws when it collected the information of some 600,000 citizens, a top watchdog said on Thursday, pledging to seek a court order to force the social media giant to change its practices.
Privacy Commissioner Daniel Therrien made his comments while releasing the results of an investigation, opened a year ago, into a data sharing scandal involving Facebook and the now-defunct British political consulting firm Cambridge Analytica.
Though Facebook has acknowledged a “major breach of trust” in the Cambridge Analytica scandal, the company disputed the results of the Canadian probe, Therrien said.
“Facebook’s refusal to act responsibly is deeply troubling given the vast amount of sensitive personal information users have entrusted to this company,” said Therrien.
Specifically, the company refused to voluntarily submit to audits of its privacy policies and practices over the next five years, he said.
“The stark contradiction between Facebook’s public promises to mend its ways on privacy and its refusal to address the serious problems we’ve identified – or even acknowledge that it broke the law – is extremely concerning,” he added.
Facebook was not immediately available for comment.
The Office of the Privacy Commissioner does not have the power to levy financial penalties, but it can seek court orders to force an entity to follow its recommendations.
It could take a year to obtain a court order, Therrien said.
The investigation revealed there was an “overall lack of responsibility” with people’s personal information that means “there is a high risk that” their data “could be used in ways that they do not know or suspect, exposing them to potential harms.”Apart from privacy violations by Facebook, the investigation also highlighted problems with regulating social media.