What kind of privacy risk can it have when a business
communicates through Facebook? In a recent report, The Norwegian
Data Protection Authority states that it will stop using Facebook.
The decision came after the authority conducted a risk assessment,
which concluded that having a page on Facebook entails too high
risk.
All companies that processes personal data must ensure that they
comply with the obligations in the EU's General Data Protection
Regulation (GDPR). The obligations will also apply when a company
uses social media, for example by creating a business page on
Facebook.
In essence, a company's compliance efforts shall include
measures to ensure that the privacy of data subjects is
safeguarded. Companies that ignore the fundamental GDPR
requirements risk administrative fines, monetary claims from data
subjects and unwanted press coverage. According to the GDPR, a
company shall evidence that it has carried out a risk assessment
and considered privacy
