The
directive to New York's Department of State and Department of
Financial Services (DFS) came after the Wall Street Journal said
testing showed that Facebook collected personal information from
other apps on users' smartphones within seconds of them entering
it.
The WSJ reported that several apps share sensitive user data
including weight, blood pressure and ovulation status with
Facebook. The report said the company can access data in some
cases even when the user is not signed into Facebook or does not
have a Facebook account.
In a statement Cuomo called the practice an "outrageous abuse of
privacy." He also called on the relevant federal regulators to
become involved.
Facebook said in a statement it would assist New York officials
in their probe, but noted that the WSJ's report focused on how
other apps use people's data to create ads.
"As (the WSJ) reported, we require the other app developers to
be clear with their users about the information they are sharing
with us, and we prohibit app developers from sending us
sensitive data. We also take steps to detect and remove data
that should not be shared with us," the company said.
Shares in Facebook took a short-lived hit after the newspaper
report was published, but closed up 1.2 percent.
In late January Cuomo along with New York Attorney General
Letitia James announced an investigation into Apple Inc's
failure to warn consumers about a FaceTime bug that had let
iPhones users listen to conversations of others who have not yet
accepted a video call.
Facebook is facing a slew of lawsuits and regulatory inquiries
over privacy issues, including a U.S. Federal Trade Commission
investigation into disclosures that Facebook inappropriately
shared information belonging to 87 million users with British
political consulting firm Cambridge Analytica.
New York's financial services department does not traditionally
supervise social media companies directly, but has waded into
digital privacy in the financial sector and could have oversight
of some app providers that send user data to Facebook.
In March, it is slated to implement the country's first
cybersecurity rules governing state-regulated financial
institutions such as banks, insurers and credit monitors.
Last month, DFS said life insurers could use social media posts
in underwriting policies, so long as they did not discriminate
based on race, color, national origin, sexual orientation or
other protected classes.
(Reporting by Jonathan Stempel in New York and Katie Paul in San
Francisco; editing by Meredith Mazzilli and Tom Brown)
[© 2019 Thomson Reuters. All rights
reserved.] Copyright 2019 Reuters. All rights reserved. This material may not be published,
broadcast, rewritten or redistributed.
Thompson Reuters is solely responsible for this content.
|
|