The Bundeskartellamt, Germany’s anti-monopoly regulator, has ruled that Facebook has 12 months in which to comply with its new policies. This is a major setback for Facebook’s ambitions to more closely align WhatsApp, Instagram and Facebook itself. We explain what the new ruling means for Facebook, and for its users.
Bundeskartellamt Ruling Against Facebook Data Combination
At present, Facebook has significant – and growing – abilities to combine user data gathered from the various platforms it owns. If you run a Facebook account, then you’d likely expect a large amount of your user data to be amassed by the social media giant. But it also owns photo-sharing behemoth Instagram, plus WhatsApp, one of the most popular instant messaging services worldwide. With its present activities, Facebook is able to track and combine user data across these apps, bringing the data back to a single source Facebook account. It can potentially link one user’s WhatsApp activity to the Facebook or Instagram activity of other people stored in their phone’s contact list. According to the Bundeskartellamt, “All data collected on the Facebook website, by Facebook-owned services such as e.g. WhatsApp and Instagram and on third party websites can be combined and assigned to the Facebook user account.” How much of this data collection is “opt in”? Far too little, in the view of the German regulator. The Bundeskartellamt has demanded change in the way that Facebook gathers explicit user consent before such data harvesting and combination. And that has far-reaching consequences – at the very least, the ruling would extend across the European Union.
User Consent and the Right to Opt In
The danger, of course, is that Facebook – like so many online services – may simply serve up pages of dense legalese to its users, who are highly likely to consent without reading it at all. And that’s where the issues of “explicit consent” and “the right to opt in” come into play. Traditionally, when using any online service (particularly free ones), a user is left with two options – opt in, or miss out. In practice, this means that if you don’t agree to the service’s own rulebook, then you don’t get to use the service. However, Germany’s anti-monopoly agency appears to be explicitly ruling against this. Instead, it’s insisting that users of Facebook, WhatsApp or Instagram must be presented with the right to either consent to Facebook’s practice of harvesting data across its platforms, or be permitted to continue to use each service, but opt out of the data-combination. The Bundeskartellamt is quite frank on the topic, stating: In fact, the ruling extends even beyond Facebook’s own ecosystems. The Bundeskartellamt has also ruled that Facebook can no longer collected data from third party websites and assign them to a Facebook user account without a user’s voluntary consent.
How Has Facebook Responded?
Needless to say, Facebook is less than thrilled. It has immediately rebuked the ruling in a post on Facebook’s official blog, titled “Why We Disagree With the Bundeskartellamt” (try reading that without using a whiny voice). However, amid the less sympathetic appeals to the way it protects user data, Facebook raises an interesting point in its blog post. And that’s that its own practices must be viewed in the context of how rival tech giants – including Google and Twitter – behave. In its post, Facebook even pointed towards its own waning popularity in Germany as reason not to be so harsh on it, saying that “The Bundeskartellamt found in its own survey that over 40% of social media users in Germany don’t even use Facebook.”
The Google-Shaped Elephant in the Room
Is Facebook really the big bad when it comes to harvesting user data and combining data across different services? According to experts, it’s a distant second to a company that most of us use every day – Google. “Facebook is only number two,” says Dr. Marc Al-Hames, General Manager of Cliqz GmbH, a German developer of data protection technologies. “When it comes to our data, the top priority of the market regulators shouldn’t be Facebook, it should be be Alphabet [Google’s parent company].” It’s hard to argue with this point, and Facebook certainly seems keen to agree, given its own cry of unfair singling-out on its blog post. Though data combination across WhatsApp, Instagram and Facebook is unwelcome to many – especially those who joined the first two before Facebook acquired them – the depth of data collection pales compared to what Google is able to amass:
Use Facebook Services Or Be Left Out?
For the average user of WhatsApp, Facebook or Instagram, it can feel like there’s little option but to consent to the terms of service, if you want to use the service. According to Al-Hames, Facebook “mercilessly exploits” this fear of being left out, effectively forcing users to consent to its data-collection, or else miss out on connecting with friends and staying in touch day-to-day. WhatsApp is a prime example. Though it’s yet to get the same foothold in the US, it’s an instant-messaging giant in Europe and throughout much of the world. And that means users sign up quickly to get involved, and pay little heed to how their data is harvested along the way. The new ruling from the German regulator has certainly been enough to put Facebook on the defensive, and that’s perhaps long overdue. How we stay in touch with our nearest and dearest should be, at some level, a personal matter. And if data is to be collected along the way, at the very least, we have the right to sign off on what data this is and how far it gets shared.
