[logfromblammo]

The friend published on an Internet public platform and added metadata to tag ancestor poster.

Where is the reasonable expectation of privacy?

If you share anything at all over Facebook, you should expect it to be in someone's personal dossier of you, forever. It's not always going to be just the people who know you and presumably bear you good will, either.

That's exactly why I don't post photos on Facebook.

[wormseed]

> If you share anything at all over Facebook, you should expect it to be in someone's personal dossier of you, forever.

No, they shouldn't, and this why we have privacy laws.

[logfromblammo]

You think that everyone always obeys the law?

Please tell me how you expect to enforce such laws without intrusive surveillance on everyone's networks and storage that would entirely defeat the purpose of having them.

"Three can keep a secret, if two of them are dead."

Even if Alice sends a file to Bob that is entirely safe from Eve while in transit, Alice has no recourse whatsoever from within the channel if Bob then turns around and just hands it over to Eve once he recovers the plaintext. Facebook is an untrustworthy recipient. Once you hand over any data, you lose your absolute control over them.

They have the capability to hand over your data to untrusted third parties, there are no safeguards in place to prevent them from doing so, no surveillance in place to detect when they have done so, and no effective recourse for any individual who feels that they may have been injured by it. We have sufficient evidence to believe that Facebook has done it in the past (Cambridge Analytica being just one well-publicized example), without even needing to know whether it was intentional, accidental, or paid business. I therefore conclude that they are still doing it now, and will continue doing it in the future.

Anything you say or do or remember in front of Facebook can and will be used against you in the court of commerce. The machines will process it all to squeeze the pennies out, and your privacy is an issue only insofar as it may impede the flow of data you willingly hand over to them in the future.

[jyrkesh]

Unless you're referring to something outside of GDPR, those laws explicitly exempt individuals not acting as processors.