Facebook Begins Rolling Out Data Protection Assessment for Developers of Certain Apps

Facebook shared details on a new requirement for application developers with apps that access advanced permissions via its platform, the Data Protection Assessment. Product marketing director, developer platform Kelly Stonelake explained in a blog post, “This is the next step among several initiatives we’ve introduced over the past year to ensure that we are continuously making progress toward our commitment to people’s privacy and data security—a responsibility that we share with all developers in our ecosystem.” The social network described the Data Protection Assessment as a questionnaire for apps accessing advanced permissions, specifically focused on how developers protect, share and use platform data. It will begin rolling out at the end of July. Privacy policies and implementations of data security practices will also be covered. Developers of apps that access the highest sensitivity of user data will be required to provide evidence such as: examples of contractual language with service providers regarding platform data, third-party data security certifications, such as a SOC2; a link to ways users can report vulnerabilities they find in the app; and descriptions of ways users can request that their data be deleted. Stonelake said the Data Protection Assessment is different from Data Use Checkup, an annual process that requires developers to certify that their continued use of Facebook data is in compliance with its platform policy and focuses on what specific permissions the app has access to. She added that it is also separate from App Review, which Stonelake described as a forward-looking process that gates access to certain Facebook platform permissions, requiring developers to submit an application to justify platform access. Stonelake wrote, “The combination of App Review, Data Use Checkup and Data Protection Assessment allow us to get a fuller picture of how apps are accessing platform data and the methods they are using to keep this data secure.” Facebook shared the following steps developers should take to prepare for the Data Protection Assessment: Update contact information in Notification Settings.Ensure that the list of app administrators is up to date in the App Dashboard under “Roles.”Remove any apps that are no longer needed. Carefully assess whether or not the app is necessary, as this action may be difficult to reverse. To remove an app, go to App Dashboard, Settings, Advanced.Review Facebook’s platform terms (https://developers.facebook.com/terms/) in detail and be sure questions on how an app is complying with these terms can be answered.Gather relevant documentation such as privacy policy, security certificates, data deletion flows and sample contractual language with service providers regarding data practices. App admins of developers with apps that are in scope for this periodic assessment, based on data those apps have access to, will receive emails and messages in the app’s Alert Inbox when their time comes to complete the assessment. Notifications will also appear in App Dashboard. Stonelake cautioned, “The assessment asks questions about how you use, share, protect and delete platform data. If your app accesses particularly sensitive data, you will be required to provide documentation, and it may take time to gather this information. Be sure to start the assessment early to allow plenty of time to complete it. You don’t need to complete the assessment in one setting. You can save your progress and return to the assessment later.” Once an app is enrolled in the Data Protection Assessment, the developer has 60 days to complete and submit the assessment, and Facebook said non-submission or violations of its terms could result in enforcement actions. Stonelake concluded, “We know that protecting people’s privacy is just as important to you as it is to us. Thank you for partnering with us as we continue to build a safer, more sustainable platform.”

Platforms

Facebook Begins Rolling Out Data Protection Assessment for Developers of Certain Apps

It is aimed at those that require advanced permissions from its platform

David Cohen

About

Subscriptions

Events

Publications

WORK SMARTER - LEARN, GROW AND BE INSPIRED.

Subscribe today!

David Cohen