A group of law students went through the Facebook system and found that it broke the Canadian privacy code in many places,
notes Ars Tech:
Facebook's policies and practices were analyzed by a "team of law students" over the winter, resulting in their discovery of what they believe to be numerous violations of the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA). Some of the issues raised in the complaint are a little benign: for example, CIPPIC takes issue with the fact that all of a user's friends can see Wall posts (comments) left by other friends, and that it's not easy to simply delete all Wall posts with a single click. Other issues, however, are more serious, like a user's inability to easily delete his or her account and all the data associated with it.
We don't know of any study thats been done in the UK or EU but we suspect a similar situation would occur, from the working knowledge of UK data protection law we have. Any student legal teams fancy doing this as a project?
Maybe a Facebook group could be set up to co-ordinate it