Cambridge Analytica: all the news about Facebook’s data privacy scandal

After the Cambridge Analytica data scandal broke in 2018, things got bad enough for Meta (then Facebook) that Mark Zuckerberg had to face Congress to try to explain what had happened. The focus on how much data Facebook had on everyone, including “shadow profiles” for non-Facebook users, was enough to shake financial markets and, eventually, prompt a public apology tour from Mark Zuckerberg.

Now we’ve learned from a slide presented today at FTC v. Meta during former COO Sheryl Sandberg’s testimony that the company’s board of directors considered offering ad-free Facebook subscriptions as part of its response to the backlash. With users realizing that the company’s “free” services were paid for by their own data, maybe offering a way to pay for more privacy could change the narrative.

Mark Zuckerberg and Sheryl Sandberg were in line to give hours of depositions in response to a lawsuit over Facebook and the Cambridge Analytica data privacy scandal, but now that won’t happen — the company has reached a settlement agreement with the plaintiffs. As reported earlier by Reuters, a court filing reveals the parties have reached an agreement in principle and requested a stay of 60 days to finalize their written agreement. Without the settlement and stay, they would have been deposed before September 20th.

You can read the document for yourself below, but so far, there are no details about the terms of the agreement. Meta, as the company is now known, declined to comment via a spokesperson, while lawyers for the plaintiffs have not yet responded to an inquiry from The Verge. Still, I’d guess that keeping things from going any further is worth a lot of money to Meta, no matter how much it’s spending on VR.

District of Columbia Attorney General Karl Racine is adding Facebook CEO Mark Zuckerberg to a lawsuit over the Cambridge Analytica data-mining scandal. Racine announced the addition on Twitter this morning, saying his investigation had revealed that Zuckerberg was “personally involved in decisions related to Cambridge Analytica and Facebook’s failure to protect user data.”

The 2018 lawsuit accuses Facebook (and now Zuckerberg) of misrepresenting its policies around third-party data access and compromising user privacy with lax protections. The attorney general’s office alleges that Facebook violated the Consumer Protection Procedures Act and seeks civil damages for the offense. A judge allowed the case to proceed despite Facebook’s efforts to halt it in 2019.

Facebook today announced that it has suspended “tens of thousands” of apps as part of an ongoing investigation into improper data use on the part of third-party developers. The investigation is part of a broader effort the company embarked on last year in the wake of the Cambridge Analytica data privacy scandal, which involved a political consulting firm purchasing data on tens of millions of Facebook users that had been collected, packaged, and sold by the maker of a quiz mobile app.

The tech giant has been slow to reveal the scope of its ongoing investigation. In May 2018, the company said 200 apps had been suspended; in August 2018, that number jumped to 400. Now, roughly 12 months later, the company is admitting that it investigated millions of apps and has suspended “tens of thousands.”

The office of the Washington, DC attorney general announced today that it is filing a lawsuit against Facebook over the Cambridge Analytica scandal.

The scandal erupted this year after it was revealed that Facebook had leaked the data of tens of millions of users by sharing the information with an academic, which was in turn obtained by the data firm. While Facebook CEO Mark Zuckerberg was hauled before Congress to testify after the revelation, and Cambridge Analytica has since folded, the lawsuit is the first major government action taken in the United States against Facebook over the incident.

Facebook is appealing the £500,000 fine levied by the UK’s data watchdog over the Cambridge Analytica scandal, the social network has confirmed. It says the decision taken by the UK’s Information Commissioner’s Office (ICO) is unjustified, and that the regulator found no evidence that UK users specifically had their information improperly shared. The news comes on the day Facebook’s right to appeal was due to expire.

Facebook’s lawyer, Anna Benckert, said that the ICO’s fine “no longer relates to the events involving Cambridge Analytica” because it has found “no evidence” that Facebook users in the UK had their information shared with the analytics company. The lawyer’s statement goes on to say that this broadens the reasoning behind the ICO’s fine, meaning it could threaten “the basic principles of how people should be allowed to share information online.” The company argues, for example, that it would prevent people from forwarding messages without the original author’s explicit consent.

The UK’s data watchdog has levied the maximum possible fine against Facebook for its failure to protect user’s personal information in the Cambridge Analytica scandal.

The fine is just £500,000 ($644,000), a small fee for a company that posted $13.2 billion in revenue in the last quarter alone. But the figure was calculated using the UK’s outdated 1998 Data Protection Act, and regulators say it would have been “significantly higher” under the EU’s new GDPR regulations, which came into force in the UK in May.

Facebook this evening announced that it’s shutting off access to its application programming interface, the developer platform that lets app makers access user data, for hundreds of thousands of inactive apps. The company had set an August 1st deadline back in May, during its F8 developer conference, for developers and businesses to re-submit apps to an internal review, a process that involves signing new contracts around user data collection and verifying one’s authenticity.

The goal is to ensure third-party software on Facebook was in line with the company’s data privacy rules and new restrictions put in place in the wake of the Cambridge Analytica scandal, in which a third-party developer siphoned user data and sold it to another firm in violation of Facebook’s terms of service. Now, after it identified numerous apps that were either inactive or from developers who had not submitted the software for review, Facebook is cutting off those apps’ access to its Platform API.

United Kingdom regulators slapped Facebook with the maximum possible fine over this year’s Cambridge Analytica data privacy scandal, several outlets reported Tuesday. The Washington Post was among those reporting that Facebook would have to pay £500,000, or about $664,000, after data analytics firm Cambridge Analytica improperly obtained information about millions of users and used it in an effort to sway the 2016 US presidential election.

The UK Information Commissioner’s office found that Facebook lacked sufficient privacy protections and failed to catch warning signs that Cambridge Analytica was misusing people’s data, the Post reported. In addition to the US election, Cambridge Analytica also worked on the successful Brexit campaign, among other projects.

A developer of Facebook quizzes under the brand NameTests has been found to have exposed the personal information of as many as 120 million Facebook users, according to a report from TechCrunch. The company behind NameTests, German app maker Social Sweethearts, created popular social quizzes like “Which Disney Princess Are You?” and distributed them on Facebook, and it has around 120 million monthly users on the platform. Self-described hacker Inti De Ceukelaire wrote a Medium post yesterday, outlining how the quizzes were collecting Facebook information like names, birthdays, photos, and friend lists and displaying them in a JavaScript file, one that could be obtained easily by malicious third parties.

Apparently, Ceukelaire attempted to contact Facebook about this multiple times and was told the company would look into it. And in the wake of the Cambridge Analytica data privacy scandal — in which tens of millions of users had their personal information collected, packaged, and sold to a third-party company — Facebook’s handling of data leaks and security breaches is under especially heavy scrutiny. Only months later, in June, did Ceukelaire notice that NameTests had changed the way it processed user data to close the leak.

Data analysis company Data Propria, led by a former Cambridge Analytica strategist, is reportedly working on President Donald Trump’s 2020 re-election campaign. The Associated Press reports that Data Propria has begun work on a project “along the lines” of Cambridge Analytica’s controversial work for Trump in 2016. Data Propria head Matt Oczkowski denied the claim, though he didn’t rule the idea out for the future.

The AP writes that Data Propria, which launched late last month, is affiliated with at least four employees of now-defunct Cambridge Analytica. (Oczkowski himself was formerly Cambridge Analytica’s head of product.) Like Cambridge Analytica, Data Propria uses data and behavioral science to target internet users with ads or political messages. The company has confirmed that it’s got a “modest” contract with the Republican National Committee for this year’s midterm elections.

A series of reports this week revealed that, for the past 10 years, Facebook’s broad sharing of data extended not only to app developers but to phone companies as well. That included an agreement with Huawei, which has already been under intense government scrutiny for potential cybersecurity risks due to its alleged ties to Beijing.

On Sunday, following a New York Times report, Facebook admitted that it had data-sharing partnerships with at least 60 device makers, including Apple, Samsung, and Amazon. These companies received access to user data, including information on a user’s friends without their consent. In some instances, they could even access the information of friends of friends, as one Times reporter with a 2013 BlackBerry found. The admission reveals that the massive Cambridge Analytica data scandal, in which the data of over 87 million Facebook users was mined through a third-party social media app, was not an outlier.

On October 19th of last year, a just-barely bipartisan group of senators held a press conference to announce a new piece of legislation. The Honest Ads Act, as the bill is called, would require Facebook, Google, and other tech platforms to retain copies of the political ads they host and make them available for public inspection. Platforms would have to release information about who bought the ads, how much they cost, and to whom the ads were targeted. Anyone who spent more than $500 on political ads would be subject to public scrutiny.

“Our democracy is at risk,” a solemn Sen. Amy Klobuchar (D-MN) told reporters at the time. “Russia attacked our elections, and they and other foreign powers and interests will continue to divide our country if we don’t act now.” Klobuchar presented the legislation as a simple but urgent fix, and played up the bill’s bipartisan nature in hopes that it would quickly become law.

The president of the European Parliament, Antonio Tajani, has announced that his meeting with Facebook CEO Mark Zuckerberg tomorrow is no longer behind closed doors and will be live-streamed. Tajani made the announcement in a tweet that Zuckerberg has accepted his new request for the public meeting, which is expected to also include the leaders of Parliament’s political groups and some parliament members (MEPs). The meeting was previously a private one, but according to Politico, criticism from the public, lawmakers, and MEPs led to the turnaround.

“We’re looking forward to the meeting and happy for it to be livestreamed,” Facebook said in a statement to Politico. The meeting will be streamed via the European Parliament website from 6:15PM to 7:30PM CET (12:15PM ET to 1:30PM ET) tomorrow.

The Department of Justice and the Federal Bureau of Investigation have launched an inquiry into Cambridge Analytica, the data mining firm that last month announced it would be shutting down amid the Facebook privacy scandal that embroiled the social network starting back in March. The investigation, the existence of which was first reported this evening by The New York Times, is still in the early stages and we don’t yet know if it has anything to do with Cambridge Analytica’s connections to the 2016 presidential campaign of President Donald Trump, according to The Times.

The firm supposedly provided ad targeting expertise for Trump’s campaign based on data it acquired from Cambridge psychology professor Aleksandr Kogan, who gathered the data on as many as 87 million Facebook users using a quiz app that siphoned the information from its users’ friends lists. Kogan then packaged and sold that data in violation of Facebook’s terms of service. The DOJ and FBI are reportedly looking into whether Cambridge Analytica violated American election laws by acquiring the data and using it to inform its services, which were based on the idea that such data could help campaigns create profiles of American voters whose behaviors could then be swayed by specific ad targeting.

Cambridge Analytica was nothing if not consistent. After nearly two months of scandal, the Trump campaign’s onetime data analytics firm died as it lived: denying it ever did anything wrong and excoriating the journalists who reported about the ways in which it misused data. Its timely death on Wednesday — which arrived on the second day of the F8 developer conference — illustrated something Facebook knew all too well: data privacy matters to people, and acting recklessly with it could kill you.

The company had been consumed by controversy amid revelations that it obtained data on up to 87 million Facebook users through a personality quiz app called thisisyourdigitallife created by a University of Cambridge researcher named Aleksandr Kogan. The scandal led to government hearings in both the United Kingdom and the United States, and Facebook CEO Mark Zuckerberg was called to testify before Congress. Cambridge Analytica’s CEO, Alexander Nix, resigned after further reporting caught him discussing how to entrap politicians on behalf of clients.

After the far-reaching scandal over mishandled Facebook user data, Cambridge Analytica is shutting down.

The news was reported earlier by The Wall Street Journal. The company soon said in a press release that the affiliated United Kingdom-based company SCL Elections has filed for insolvency, and that bankruptcy proceedings will begin soon for Cambridge Analytica as well. The data analytics company’s United Kingdom-based parent organization, SCL Group, will also be shuttered, according to the Journal.

Sens. Amy Klobuchar (D-MN) and John Kennedy (R-LA) will introduce legislation to protect the privacy of users’ online data, the pair said today in a joint statement. Though a bill has not been drafted yet, the legislation would, among other things, give users recourse options if their data is breached, and the right to opt out of data tracking and collection.

The proposed legislation will address seven key points, the senators said:

Facebook CEO Mark Zuckerberg made his second of two appearances before Congress on Wednesday, enduring a five-hour session of questions from members of the House Energy and Commerce Committee. In contrast to their amiably confused counterparts in the Senate, members of the House committee demonstrated a generally better command of how Facebook works and how its efforts to develop richly detailed advertising profiles for billions of people have created privacy concerns around the world.

As with yesterday, Facebook sought to promote steps it has already taken to address the fallout of the Cambridge Analytica data privacy scandal. But House members spent less time on Cambridge Analytica in favor of asking about a broader range of subjects, including how Facebook tracks people around the web, privacy protections for minors, and Facebook’s consent decree with the Federal Trade Commission.

Facebook founder and CEO Mark Zuckerberg is testifying before the House Committee on Energy and Commerce today, fresh off the heels of a grueling five-hour joint session before the Senate Judiciary and Commerce committees yesterday. In total, Zuckerberg will face questions from nearly 100 legislators, and many of those legislators have received thousands of dollars from the company Zuckerberg runs.

Over the last 12 years, Facebook has spent $7 million in campaign contributions. Historically, Facebook has donated slightly more to Democrats than Republicans, but overall, the platform’s political footprint is small in Washington, DC relative to its market cap, which is currently calculated at about $400 billion. That’s not unusual for technology companies: Amazon spent $4 million in campaign contributions over 20 years, and it has a market cap of nearly $700 billion. (Note, however, that Alphabet, Inc., with a market cap just over Amazon’s, appears to be outspending Facebook in DC by an order of magnitude.)

The iconic moment from Mark Zuckerberg’s Senate hearing yesterday came before he faced toothless questions from profoundly uninformed senators. It happened when the Facebook boss walked to his seat and was confronted by a wall of wide-angle camera lenses and photographers jostling for position, each of them trying to capture the most distilled picture of a CEO under fire. Zuckerberg’s personal space was eroded by the heaving throng, and he was treated less as a human and more as an object of fascination.

In that moment, Mark Zuckerberg must have felt what it was like to be a user of his online platform. Every inch of his being was subjected to close scrutiny, observation, and recording for posterity. Whether he liked it, whether he could meaningfully consent to it, or not.

After yesterday’s seemingly endless marathon hearing before the Senate Judiciary Committee and the Senate Commerce, Science, and Transportation Committee, today Mark Zuckerberg heads to the House, where he’ll be answering questions in front of the Energy and Commerce Committee.

Yesterday’s session featured almost 50 legislators peppering Zuckerberg with queries about how Facebook safeguards user data, details on the Cambridge Analytica scandal, and even questions about what kind of regulations Zuckerberg believes should be put in place to regulate Facebook.

Facebook CEO Mark Zuckerberg testified before Senate today in a marathon five-hour session about the ongoing Cambridge Analytica data privacy scandal. In addition to discussing that situation, and how as many as 87 million users had their information misused by the data mining firm, the conversation also touched on Facebook’s role and responsibility in the world as a news source and a massively influential tool for democracy and communication.

While there were few bombshell revelations, Zuckerberg did answer a far-reaching and diverse set of questions ranging from whether Facebook is a monopoly to whether the company would ever consider an ad-free paid version. As part of his appearance on Capitol Hill today, Zuckerberg brought along a thick binder of notes to help him answer questions, stay on his talking points, and come up with quick and relatively innocuous responses to hot-button issues. Thankfully, because there were photojournalists in the room, we have access to a least two pages of those notes.

Mark Zuckerberg made his highly anticipated debut before the Senate today during a marathon five-hour hearing before a joint session of the Commerce and Judiciary committees. Zuckerberg remained calm and level-headed throughout, and senators were mostly polite and deferential as they sought to understand how Facebook had inadvertently allowed the profiles of up to 87 million people to be collected by the political data-mining firm Cambridge Analytica.

In the weeks leading up to the hearing, Facebook made a series of announcements designed to demonstrate that it took the data leak seriously and was working to prevent it from happening again. Zuckerberg referred repeatedly today to these changes, which include making privacy shortcuts easier to find, restricting the data shared with developers when you log in using your Facebook account, labeling political ads and making them available for public inspection, and launching a bounty program to reward people who find examples of data misuse.

A new bill from Sens. Richard Blumenthal (D-CT) and Ed Markey (D-MA) would place significant new constraints on data collection by Facebook and other online services. Dubbed the CONSENT Act (short for Customer Online Notification for Stopping Edge-provider Network Transgressions), the bill requires explicit opt-in consent from users to use, share, or sell any personal information, as well as clear notification any time data is collected, shared, or used. The bill would also add new security and breach reporting requirements.

Crucially, the CONSENT Act relies on the Federal Trade Commission to enforce any violations of those new rules. If the bill passes, the result would be a significant expansion of the commission’s power and role in online advertising more broadly. The commission is already expected to take action against Facebook in response to a 2011 consent decree, which many believe the Cambridge Analytica data collection may have violated.