Social networks have shaped a major part of our lives today. In addition to benefits for societies, this phenomenon has also brought disadvantages. One of these important problems is breach of users' privacy in social networks. Social networks have access to the data and information of many of their users, who can use that information for different purposes. Therefore, it is necessary to protect the information and privacy of the users more than before. The main question is whether collecting, categorizing and selling users' information in social networks is a breach of their privacy? And what solutions are there to deal with it? In this article, using the analytical descriptive research method, the above issue has been investigated. Finally, this article has reached the conclusion that the use of users' information by social networks is a breach of users' privacy, and it is not possible to accept all conditions when users register in social networks as the user's consent to use their data. Therefore, it is necessary to regulate the use of user information in social networks and prevent further misuse of user information. In this regard, there are three main solutions (regulation, self-regulation and tax collection). It is not effective to use only one method to protect users' data. it is recommended to use a combination of the aforementioned methods, but the most effective method in this regard is to impose a tax on social networks and spend these amounts to develop digital security and protect users' data and compensation for damages. In Iran, due to the existence of a legal gap, in order to protect users' data, a law should be approved to protect users and their information in social networks.