My likes are my data, because that is what the whole Cambridge Analytica thing is about (deriving a personality model from Likes).
My search history is my data, because it helps to identify me as a person.
My phone number they obtained through my friends uploading their contact list is my data.
Clearly, I’m not entitled to all data, but to a lot more than what’s in that archive.
Edit: And of course, if they have a shadow profile on you without you having an account (like your phone number and your name through the address book your friend uploaded), that is all your data, processed without your consent and without a way for you to get hold of.
This seems like an important one. If they log all those messages, presumably they should all be there with some indication of status (deleted, published, etc.).
I can only imagine the sensitive things contained in that dataset... Things like mistakenly pasted plaintext passwords, PII, etc.
Facebook is being selective in what they export here. The result is a misleading impression about what data they have on you.
I would say if they provide everything you've directly provided, they've fulfilled their "obligation."
Obligation is in quotes, because I don't actually believe they should even be required to do this.
Post likes, shares and search history are all examples of data you've directly provided that they're omitting from the export.
As for your principles, when you ask the FBI for their file on you their obligation is not limited to data you've directly provided.
The FBI is subject to FOIA. FB is not, obviously.
It's in the Activity Log, which is omitted from the download. This is not obvious and misleading. In fact someone asked whether they could download their activity and Facebook directed them to the Downloaded Info, which omits it.[1]
As for FOIA, you're missing the point. Of course FB is not subject to such a law. The whole debate right now is whether it should be. If you request an organization's "file" on you, it should be comprehensive and not selectively omit the creepiest stuff.
[1] https://www.facebook.com/help/community/question/?id=6345563...
I would say no if before you signed up they were willing to tell you everything they "intend" to collect about once you agree.
And when I say "tell you" I mean an itemized list in plain simple english not a thousand pages of obfuscated legalese.
- Likes on everything I liked on FB and external
- Shares via Share Buttons on external websites
- Websites I visited and where I was tracked because of Social Media buttons
- Time spent on FB
- Status updates I changed or dismissed
- Mouse hovering behavior to train the feed
- Data like my phone number that wasn’t put there by me but correlated through my friends address books
- Metadata through WhatsApp acquisition
- ...