Toronto, July 17 - Indicting Facebook for privacy violations, Canada's Privacy Commissioner Thursday said though 'privacy issues are top of mind for Facebook, and (yet) we found serious privacy gaps in the way the site operates.''

The social networking site, which has about 250 million users worldwide, has been under the scanner for allegations that it violates Canadian privacy laws. More than 12 million Canadians use the website.

The investigation was launched after a complaint by intern law students at the Ottawa-based Canadian Internet Policy and Public Interest Clinic last year. In their complaint to the Privacy Commission, the students had said that the website was passing on users' personal information to advertisers without their permission.

Listing 21 privacy violations by Facebook, the students had said it infringed the law by failing to identify the purpose for which it collects users' personal information and obtains consent to use and disclose their personal information.

The complaint had said that the 'account settings'' page describes how to deactivate accounts, but not how to delete them to actually remove personal data from Facebook's servers.''

The students had also alleged that it 'didn't destroy personal information of those who terminate their services and failed to safeguard personal information from unauthorized access.''

Releasing its report after a 13-month-long probe, Canada's Privacy Commissioner Jennifer Stoddart said Thursday, 'We found serious privacy gaps in the way the site operates. Canadians truly need to know what they are getting into when joining Facebook and should be able to control the information they share.''

The Privacy Commission urged Facebook 'to implement all of our recommendations to further enhance their site, ensure they are in compliance with privacy law, and ultimately show themselves as models of privacy.