New York governor orders probe into Facebook access to data from other apps

NEW YORK (Reuters) - New York Governor Andrew Cuomo on Friday ordered two state agencies to investigate a media report that Facebook Inc may be accessing far more personal information than previously known from smartphone users, including health and other sensitive data.

The directive to New York's Department of State and Department of Financial Services (DFS) came after the Wall Street Journal said testing showed that Facebook collected personal information from other apps on users' smartphones within seconds of them entering it.

The WSJ reported that several apps share sensitive user data including weight, blood pressure and ovulation status with Facebook. The report said the company can access data in some cases even when the user is not signed into Facebook or does not have a Facebook account. In a statement Cuomo called the practice an "outrageous abuse of privacy." He also called on the relevant federal regulators to become involved.

Facebook said in a statement it would assist New York officials in their probe, but noted that the WSJ's report focused on how other apps use people's data to create ads.

"As (the WSJ) reported, we require the other app developers to be clear with their users about the information they are sharing with us, and we prohibit app developers from sending us sensitive data. We also take steps to detect and remove data that should not be shared with us," the company said.

Shares in Facebook took a short-lived hit after the newspaper report was published, but closed up 1.2 percent. In late January Cuomo along with New York Attorney General Letitia James announced an investigation into Apple Inc's failure to warn consumers about a FaceTime bug that had let iPhones users listen to conversations of others who have not yet accepted a video call.

Facebook is facing a slew of lawsuits and regulatory inquiries over privacy issues, including a U.S. Federal Trade Commission investigation into disclosures that Facebook inappropriately shared information belonging to 87 million users with British political consulting firm Cambridge Analytica.

New York's financial services department does not traditionally supervise social media companies directly, but has waded into digital privacy in the financial sector and could have oversight of some app providers that send user data to Facebook.

In March, it is slated to implement the country's first cybersecurity rules governing state-regulated financial institutions such as banks, insurers and credit monitors.

Last month, DFS said life insurers could use social media posts in underwriting policies, so long as they did not discriminate based on race, color, national origin, sexual orientation or other protected classes.

(Reporting by Jonathan Stempel in New York and Katie Paul in San Francisco; editing by Meredith Mazzilli and Tom Brown)