Since facebook apps request these fields so much, they could implement it as an opt-in/out checkbox "Do you want your data to be accessible by 3rd party apps without your consent through your friends?"
This way, if an app request friends access, they would get data only from the ones that allowed it.
It probably would remove a lot of value that can be extracted from their users, but facebook itself would still have all this data to use internally to target ads and they would limit the amount of data that can be exfiltrated to malicious 3rd parties without the consent of users.
Good for them to make this change, bad for them because it was after the data was collected for abuse.
Is it personal information? AFAIK the facebook T&C states that as soon as you put information into facebook it is their data. You're giving something away freely an then complaining about how the recipient uses it.
Facebook may have broken some laws and they are definitely a scummy company, but the onus is still on people not to give away their private data.
Justice may be served but it's still not as good as not having been beaten up in the first place.
The whole reason we have laws is to help people protect other people. If we expected everyone to protect themselves, we'd have no use for law. This is exactly why victim blaming is pointless and stupid.
Legal penalties don't matter to people not thinking far enough ahead for them to enter the equation. They don't matter to people who think they can get away with breaking the law (much easier for electronic crime) and they don't matter to people who think they are above the law, which may be he case here.
Harsher penalties can even be counter-productive. If you're on death row for killing one person then you better make sure you kill any potential witnesses, the penalty is the same either way.
> This is exactly why victim blaming is pointless and stupid.
Fine, I'm being pointless and stupid. But if you don't care who you're giving your data too then don't expect me to care next time it ends up with someone you didn't want.
>then don't expect me to care next time it ends up with someone you didn't want.
You say that until someone gives your information away for you. Then you'll be crying about how unfair it is that nobody else protected you. Possibly from threats you didn't even know existed.
Some company in Nigeria starts a funny website with quizzes like "what telly tubby are you?" that convinces your friends and family to provide data. The let them upload photos so they can be photoshopped onto the telletubbies for a good laugh. Now that company in a different jurisdiction is building up profile data. They'll build crappy android apps to track GPS data. There won't be one of them, there will be many and they will buy and sell data, accumulating it into bigger and bigger data sets. This isn't even a hypothetical, it's been happening in the west for a long time.
Do you want to attack the root of the issue or keep chopping heads off the hydra?
I’ve never had a Facebook account, yet friends and family do, and through them they can get info on me. You don’t have to care though, and I’ll just get with not caring about you. Meanwhile the public at large is starting to care, and your attitude won’t impress them any more than it does me.
Hacker News had various articles explaining that the EU soon will have something called the GDPR (https://www.eugdpr.org/). UK is going to exit the EU, but it's not about that in particular. If EU citizens didn't give explicit permission for this data to be shared Facebook is not following this law. As UK is questioning this behaviour it seems they'll probably have something similar to GDPR after they leave the EU.
Further, this was NOT about providing ads, instead the data personal information was shared with a third party without this being explicitly consented to. People have been profiled without this been explicit, further no consent was given. That's what is not ok.
All the other questions seem like strawmans.