Compliance of the Facebook Data Use Policy with the Principles of ISO 29100:2011

Concerns over the privacy offered by online social networks are routinely being voiced in the media. Many proposals have been made for addressing these concerns in future social networks. However, little attention has been paid to proposing solutions that could perhaps make existing social networks more privacy respectful. In this paper, we focus on examining the compliance of the Facebook data use policies to the privacy principles specified in the ISO 29100:2011 standard. The results of this examination indicate serious mismatches and can be used as the first step towards proposing concrete steps that might make Facebook more privacy respectful.