Newly released documents appear to shed light on when Facebook first learned about potential violations by Cambridge Analytica, the firm that used Facebook data to profile and target voters in the 2016 U.S. election.
The internal communication refers to concerns over Cambridge Analytica as early as Sept. 2015. In the documents, employees discuss Cambridge Analytica and other third parties that it had been warned were using its data in ways that may violate its policies. The employees said they were reaching out to the companies in question to investigate their use of Facebook data.
The correspondence between employees gives more insight into what Facebook knew at the time and when it knew it.
In April 2018, Facebook CEO Mark Zuckerberg testified in front of the Senate that the company learned in 2015 that “Cambridge Analytica had bought data from an app developer on Facebook that people had shared it with,” and demanded the firm delete and stop using data from Facebook.
In July 2019, the Securities and Exchange Commission filed a complaint claiming Facebook made misleading statements in its public filings by claiming it data misuse risks were hypothetical when it had already known of instances of misuse. In the complaint, the SEC said employees in Facebook’s political advertising group wanted to investigate potential data scraping by Cambridge Analytica in September 2015, prior to the Guardian’s December 2015 article on the firm’s use of Facebook data. The newly released documents show Facebook employees’ internal discussion about potential data scraping by Cambridge Analytica and others at that time.
Facebook said in a blog post Friday that the document “has the potential to confuse two different events surrounding our knowledge of Cambridge Analytica.” Facebook included a link in its blog post to the same correspondence leaked earlier, which it said it agreed to jointly release with the District of Columbia Attorney General.
Reached for comment, Facebook referred back to its blog post. The office of the D.C. Attorney General did not immediately return a request for comment.
Facebook said in its post that at the time, “a Facebook employee shared unsubstantiated rumors from a competitor of Cambridge Analytica, which claimed that the data analytics company was scraping public data.” Facebook said the scraping of public profiles is distinct from the data Cambridge Analytica reportedly used from users’ friends who did not consent to sharing their data. Cambridge Analytica reportedly sold data it obtained from users and their friends once they took a personality test developed by app developer Aleksandr Kogan.
Still, the documents show that Facebook was aware of potential policy violations by Cambridge Analytica as early as September 2015. Facebook employees at the time believed that data scraping by Cambridge Analytica and others could be a violation of its policies. One employee said, “my hunch is that these app’s data-scraping activity is likely non-compliant,” highlighting several Facebook Platform Policies (FPPs) that these firms could have violated, including, “Don’t sell, license or purchase any data obtained from us or our services.”
“With all the above-mentioned FPPs in mind, I imagine it would be *very* difficult to engage in data-scraping activity as you described while still being compliant with FPPs,” the employee wrote.
In the documents, one employee suggests keeping the issue of third party data usage and collection “open” and say they will work on “a more business friendly description” of its policies.
Later in the communication, one of the employees called the Cambridge Analytica situation “hi pri” for high priority after The Guardian ran its December 2015 article claiming the presidential campaign for Sen. Ted Cruz, R-TX was using data on Facebook users largely without their consent.
“This story just ran in the Guardian and is now prompting other media requests,” the employee wrote. “We need to sort this out ASAP.”