Irish watchdog warned Facebook over data security measures in 2011

A watchdog told Facebook that relying on developers to follow information rules in some cases was not good enough two years before a "data grab" on millions of users is said to have taken place.
A 2011 audit by Ireland's Data Protection Commissioner (DPC) said Facebook's security measures were "not considered sufficient" to prevent third party apps from unauthorised use of personal data.