Ryan Calo, Director of Privacy and Robotics, is interviewed in this Marketplace interview about the main obligations Facebook needs to give it's customers in regards to online privacy.

Kai Ryssdal: We can debate all day long whether there's any such thing as real online privacy in this digital day and age, but we do like to believe there is. Which is why we tend to get upset with companies that take that belief for granted.

Facebook has settled charges it violated users' personal privacy by sharing their information with clients and others without their consent.

...

Ryan Calo's the director of privacy at the Stanford Center for Internet and Society.

Ryan Calo: The main obligation you have in online privacy is that you have to give notice of your practices, and you have to adhere to that notice.