However, again it is important to draw a distinction between the controls available to users to decide to whom (only me, friends, friends of friends, public etc) and how their information is available when they take certain actions on the site and the use made of data by Facebook. As we stated at the outset of this Report, we do not believe that data protection law can be interpreted to place an obligation on Facebook to provide a free service to users without some base line serving of ads based on user information. To a point .