Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Incident Response

Australia Watchdog Sues Facebook Over ‘Misleading’ VPN App

Australia’s consumer watchdog launched legal action against Facebook on Wednesday, alleging the social media giant “misled” thousands of Australians by collecting user data from a free VPN service advertised as private.

Australia’s consumer watchdog launched legal action against Facebook on Wednesday, alleging the social media giant “misled” thousands of Australians by collecting user data from a free VPN service advertised as private.

The platform could face a fine if found guilty of deceiving users, as Australia takes an increasingly assertive stance towards powerful US tech titans.

The Australian Competition and Consumer Commission (ACCC) has accused Facebook and two of its subsidiaries — Facebook Israel and Onavo Inc — of misleading people who downloaded its virtual private network (VPN) app Onavo Protect, by collecting and using their “very detailed and valuable personal activity data”.

Records of which apps they accessed and the amount of time they spent using them were among the data allegedly used to support Facebook’s market research.

The ACCC alleges Facebook and its two partners falsely represented the now-defunct VPN service as keeping user data “private, protected and secret” between February 2016 and October 2017.

“Consumers often use VPN services because they care about their online privacy, and that is what this Facebook product claimed to offer. In fact, Onavo Protect channelled significant volumes of their personal activity data straight back to Facebook,” ACCC Chair Rod Sims said.

Advertisement. Scroll to continue reading.

“We believe that the conduct deprived Australian consumers of the opportunity to make an informed choice about the collection and use of their personal activity data by Facebook and Onavo.”

A Facebook spokesperson said the firm had cooperated with the ACCC’s investigation and would review the court filing.

“When people downloaded Onavo Protect, we were always clear about the information we collect and how it is used,” they said.

“We will… continue to defend our position in response to this recent filing.”

The ACCC has previously helped draft a law that threatens Facebook and Google with millions of dollars in fines unless they agree to pay media outlets when their platforms host news content.

In March, the Office of the Australian Information Commissioner also began legal action against Facebook for allegedly exposing more than 300,000 Australians to a data breach by political consulting firm Cambridge Analytica.

Facebook has already paid penalties in the United States and Britain over the massive 2018 data hijacking scandal involving the now-defunct British company.

Related: Twitter, Facebook Fined for Not Moving User Data to Russia

Related: Facebook, Others, Block Govt Requests on Hong Kong User Data

Related: Facebook May Have to Stop Moving EU User Data to US

Written By

AFP 2023

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

SolarWinds has appointed Justin Henkel as Chief Information Security Officer.

J. Paul Haynes has joined Cinchy as Chief Executive Officer.

Hatem Naguib has become Chief Executive Officer at Sysdig.

More People On The Move

Expert Insights

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.