This article discusses the legal and ethical challenges in social media, focusing on invasion of privacy. It presents a case study of a Minnesota court decision in 2009, where a clinic worker disclosed medical information of a patient on MySpace without consent. The article also explores the tort of the act on invasion of privacy and the struggle to balance privacy and freedom of expression.