Facebook could be breaking EU law by using shadow data for ads

That they don&#x27;t share shadow data on request is already breaking the GDPR.<p>Even if they would get some lawyerish twist on it, sometimes grey scales isn&#x27;t needed. Just give me my effing data - if you have it you have it.<p>It&#x27;s a bit of FB meta-theme on HN right now, and I wrote something similar before in another comment, but I really wish we could have some whistleblowing considering the shadow data.

I hope the EU comes after them for this. Using data collected for a completely separate purpose (ie 2fa) for advertising is blatantly evil. Not to mention this &quot;shadow data&quot; isn&#x27;t request-able, and probably not deletable.

If they&#x27;re doing something this blatantly in violation, then I hope the EU comes down hard on them.

Interesting. I&#x27;ll hit up some contacts and send them this, this is a blatant disregard of GDPR.

GDPR is not enough because violations are so hard to prove. There should be a law forcing companies to publish a full list of ads they show together with all targeting settings and data.

Does GDPR stop Facebook from re-purposing the phone numbers that they already collect? It seems to me that everything is GDPR compliant, even if it&#x27;s a scummy thing to do.

Assuming we&#x27;re at step $n on the path to corporatist dystopia, does Facebook care? Do they bait the EU into playing chicken with some sort of Facebook ban? There&#x27;s a non-negligible chance Facebook might win that one.