Facebook filing flags privacy risks