Like Google, Facebook decided to change its operation after Johannes Caspar, the data protection supervisor in Hamburg, opened a review of the company’s practices. Violations of German privacy law carry penalties up to €300,000, or $410,000, but adverse publicity can be more damaging.