To think this is a GDPR violation?

[GolfDeltaPapaRomeo]

I signed up to Facebook with really secure privacy settings, and didn't add any friends as I am moving countries and need to look up some local info and the groups and the market place would be useful.

I did not sign up with a mobile number, FB doesn't require one upon signing up.

a while later FB decided 'for my security' that I should give them a phone number and it won't allow me to go to my home page to delete my account without first giving them the number.

It says it won't use it to recommend me to "people I know" but that third party apps might use it that way.

I have a stalker and do not want this to happen.

I don't see why I have to give my data to a company who are renowned for using it inappropriately in order to delete it in order to delete my account. Surely this is a breach of GDPR I have a right to decide what information I give out and to demand my data be removed.

There is no customer service so you can't complain. The yhave a "help" section but that isn't even posting my bloody complaint.

How do they get away with this?

You really need a better understanding of what a data breach is OP:

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data

That said, the GDPR does entitle you to request erasure of your data providing that the organisation you make the request to can confirm that the request has been legitimately made by you. So I would say if you provide your number, as a means of facilitating Multi Factor Authentication and then request a full deletion of your account, then all your data including the number will subsequently be deleted.

Until you do the above, I think you'll find FB haven't done anything wrong

Don't the usual deletion instructions work?

www.facebook.com/help/224562897555674

I didn't think the 2-factor thingy was compulsory, don't think mine has it, and I've just searched for my mobile number, it isn't found! So that's a good thing!

Gizmodo reported last year that when a user gives Facebook a phone number for two-factor, it “became targetable by an advertiser within a couple of weeks.” If a user doesn’t like it, they can set up two-factor without using a phone number — which hasn’t been mandatory for additional login security since May 2018.

@DrPatient - I didn’t say they were. I said they needed to have proportionate processing in place underpinned by a lawful basis.

@GolfDeltaPapaRomeo - I’ve screenshot their DPO’s contact info (found under data policies on FB).
Good luck.

As DrPatient said, they're asking you to verify your identity as part of an effort to crack down on fake accounts, especially those used to bully and troll people. Facebook isn't unusual in this, more and more sites are doing the same.

I can understand why you don't want to give your phone number, but at the same time I understand why they want you to.

[quote DrPatient]@ELW85 They aren't breaching GDPR though. Just because OP thinks they are does not mean that they are. They aren't.[/quote]
GDPR specifically gives people the right to be forgotten. I would look for their Privacy Policy and contact the data protection officer. There is an address here that you can write to with complaints regarding data protection

en-gb.facebook.com/policy.php

You can delete your account without setting a mobile number.

@GolfDeltaPapaRomeo

I've thought about just using different names but I have friends who have done that and FB will then lock the account until you show ID proving who you are. It's a problem for people who take on another name without legally changing it. DV victims/ people who just want privacy.

I do sympathise but Facebook is commercial service operating a social networking site. It's protecting its users by asking people to identify themselves. Just sign up with a fake name and throw away email address. My dad's just done it. Then even if you do use your phone number it's not connected to your name.

I've thought about just using different names but I have friends who have done that and FB will then lock the account until you show ID proving who you are.

DS2 has an account with a fake name because FB wouldn't let him set one up with his really name without sending proof of ID. He's never had to prove his fake name.

I've never had to provide a phone number to FB. They've asked but I just ignore it.

That said, the GDPR does entitle you to request erasure of your data providing that the organisation you make the request to can confirm that the request has been legitimately made by you. So I would say if you provide your number, as a means of facilitating Multi Factor Authentication and then request a full deletion of your account, then all your data including the number will subsequently be deleted.

How will I be proving to FB that I am who I say I am by giving them a phone number? What you have said would make sense if they already had access to my phone number and they needed it for security reasons before authorising a change.

They haven't because they don't have my number and I have NEVER accessed Fb on my phone.

I am giving them my number in order for them to have further date from me.

They haven't asked my for the data in order to delete. They have asked for further date for me to access the only means of eventually deleting.

Take my number out of the equation and change it to anything else.

You log in to Facebook tomorrow and it says they will not let you go further until you give them your home address. If you then say fuck that I want to delete my account, but can't, without first giving them your address, would you be OK with that?

@SaskiaRembrandt I have no issue with them asking for my number, I'm annoyed that I am not then alongside this additional ask given an easy way to delete my account without first giving it to them.

@GolfDeltaPapaRomeo - I’ve screenshot their DPO’s contact info (found under data policies on FB).
Good luck.

Thank you @ELW85 ! I will make sure it's the same for me (in England ) and write to them.

Personally if I was that dead set against it I would've used a fake name 🤷🏼‍♀️

Sounds like FB suspects your account to be a fake one, that's why you need to submit more info.

DS2 has an account with a fake name because FB wouldn't let him set one up with his really name without sending proof of ID. He's never had to prove his fake name.

I really don't get how they work it.

You log in to Facebook tomorrow and it says they will not let you go further until you give them your home address. If you then say fuck that I want to delete my account, but can't, without first giving them your address, would you be OK with that?

I'd probably be somewhat calmer about it but to answer your question, if I wasn't happy to follow the steps to complete the universally available online deletion process, then I'd do as a previous poster has suggested and contact their Data Protection Team and ask them to delete my data.

You should understand though that FB will be completely within their rights to ask for further verification before they agree to delete your data, which might include a form of ID that matches the name on your FB account. They might choose not to do this, but the law is on their side if they do

Send us screenshots of what you are seeing OP. Perhaps you are missing a small link somewhere, or an option. Blur out details if you need to.

I have never given Facebook my umber, sometimes it asks but you just say no.

@GolfDeltaPapaRomeo - I think the Ireland address was to cover Europe (I’m in England too). They’ll probably only have one DPO for a certain jurisdiction. I don’t even know if they have a Group/global one. Hope that helps!

@GolfDeltaPapaRomeo

DS2 has an account with a fake name because FB wouldn't let him set one up with his really name without sending proof of ID. He's never had to prove his fake name.

I really don't get how they work it.

His fake name is more obviously fake than his real one!

Luckily I set mine up before all this nonsense.

Are you in the UK @GolfDeltaPapaRomeo?

I have had a facebook account for years and have never added a phone number, they ask sometimes and I say no, it has no effect on my account.

Also your thoughts on fake names are out of date, a few years back they were strict on the real names thing but that's either long gone or only enforced if someone reports a profile.

If you used facebook more often you would see that fake names are rife, loads of users only have their first name or first name and intial of last name or totally fake name etc.

facebook is free and voluntary, you're getting your panties in a bunch over nothing

You will have to have a read of their privacy statement (enjoy that!) but I suspect they are doing so on a contractual legal basis if it is limiting what you are able to do with the site. You could challenge them on whether it fair and proportionate, the law is not black and white, but that would mean taking them to court....there are groups out that that take this kind of legal action, because companies like facebook do try to stretch the limits of what they can do, but it's expensive! Usually non profit data activists do such work, they campaign to raise money to be able to do so.

So I agree with you (as someone who works in GDPR) that I don't think it's entirely proportionate to what they are trying to achieve, but if it is as I suspect contractual, you agree to the terms when you sign up and would take a lot of effort to challenge, especially as I wouldn't say it's an outright 'violation' of the legislation but an action that could be challenged.

And it is completely not true that because it is a free service that they can violate what they want...............! They are expected to adhere to the legislation as much as Amazon or a government department is supposed to.

I think you're worrying over nothing OP. It's not a GDPR breach, because you have given permission for FB to have your info, and you haven't requested that it be deleted (you are refusing to do so on the grounds that you don't want them to have your phone no).

FB will have to comply with the GDPR regs in the countries it operates in, and will delete your phone number, and all other info it holds on you when you delete your account.

FB has had my number for years. It's hidden, so no-one can see it. It hasn't caused me any problems. I don't get any "spam" or other comms from FB or anyone else via phone/text.

If you're worried about being found by a stalker, use a different name on FB, that only your friends know.

How do they get away with this?
By not giving a fuck about UK law.

See also all the fake and scam adverts and the adverts that don't comply with UK laws on provision of company details online.

I don't do facebook any more.

More of us need to avoid facebook in order to persuade them to be better; I accpet this is unlikely to happen as most people don't care.

They are expected to adhere to the legislation as much as Amazon or a government department is supposed to.

Except there is fuck all evidence of facebook (or Amazon for that matter) giving a fuck and no-one is enforcing the law.

Martin Lewis had to personally take facebook to court uisng his own money to get them to take any notice, despite the scam ads being contrary to UK law.

People need to wake up - Facebook doesn't give a fuck about piffling stuff like privacy laws.

facebook is free and voluntary, you're getting your panties in a bunch over nothing
I'd probably be somewhat calmer about it hmm

@rottiemum88 @lifesalongsong
Tell that to the person I am hiding from. I never expect anyone to read the full thread but please do try and read the whole OP. It wasn't long and it makes you look a bit dim if you can't manage that and then get all twatty on a thread.

@notheragain4 that's all really useful. Thank you!

@ELW85 I see that now thank you again for all your help.