I saw Nerve but I still like The Net better :). One of my guilty pleasures I suppose. Despite how dated it has become (and even when it was new there were technical inaccuracies to put it kindly) I still like that movie. I feel much the same about Hackers.

Also, expectation of privacy IS implied by law but it doesn't really apply in this case. First, expectation of privacy has more to do with the government (e.g. the government can't obtain and use information against you that you have a reasonable expectation to be private without getting a warrant to obtain that information) and second you don't have any such expectation (or should not reasonably) to information you have put on publicly accessible social networks and/or agreed by contract (user agreement/terms of service/etc.) to share. Of course, none of that justifies harassment or assault.