“ personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, and the processing of data concerning health or sex life.” ( Article 8 Data Protection Directive)
Canadian Privacy Commissioner: “ Facebook should be doing much more to ensure that meaningful consent is duly obtained from users when developers access their personal information [and] technological safeguards that will not simply forbid, but effectively prevent, developers’ unauthorized access to personal information that they do not need.”
L. Edwards & I. Brown (2009) Data Control and Social Networking: Irreconcilable Ideas? In A. Matwyshyn (ed.) Harboring Data: Information Security, Law and the Corporation , Stanford University Press, 202-227.
Office of the Federal Privacy Commissioner, PIPEDA Case Summary #2009-008: CIPPIC against Facebook
Article 29 Working Party Opinion 5/2009 on online social networking