[1010100101]

So are you suggesting that despite FB's rather sizeable legal budget and level of investment they will _still_ not be able to bring themsleves into compliance and stay that way? At least until the IPO. If Facebook even exists 20 years let alone 5 years from now I would be shocked. The data they've collected will of course probably have an infinite lifetime.

[sunchild]

In the US, given that they're not in a regulated industry (except to the extent they qualify as a site aimed at children), they really only need to comply with their own stated privacy policies. The question is: will they?