{"id":11031,"date":"2018-04-22T11:14:14","date_gmt":"2018-04-22T15:14:14","guid":{"rendered":"http:\/\/journals.law.harvard.edu\/crcl\/?p=11031"},"modified":"2018-10-05T12:49:36","modified_gmt":"2018-10-05T16:49:36","slug":"the-cambridge-analytica-revelations-show-why-data-privacy-is-an-essential-right","status":"publish","type":"post","link":"https:\/\/journals.law.harvard.edu\/crcl\/the-cambridge-analytica-revelations-show-why-data-privacy-is-an-essential-right\/","title":{"rendered":"The Cambridge Analytica Revelations Show Why Data Privacy is an Essential Right"},"content":{"rendered":"<p><em>Guest Post by David Meyerson, @dbmeyerson, a Software Engineer at Microsoft and co-teacher of computer science in Boston Public Schools.<\/em><\/p>\n<p>&nbsp;<\/p>\n<p>Personal data from 87 million Facebook users in the U.S. was used without those users\u2019 consent to help political consulting firm Cambridge Analytica campaign for President Donald Trump. Cambridge Analytica obtained the user data in 2015, according to <a href=\"https:\/\/www.theguardian.com\/us-news\/2015\/dec\/11\/senator-ted-cruz-president-campaign-facebook-user-data\">contemporaneous reporting<\/a> from The Guardian. But only <a href=\"https:\/\/www.nytimes.com\/2018\/03\/17\/us\/politics\/cambridge-analytica-trump-campaign.html\">more recent reporting<\/a> from The New York Times has revealed to the public the massive scope of the data shared, how it was collected, and details of how it was used to support Trump\u2019s presidential campaign. Those most recent revelations have caused public outcry aimed at Facebook, led to Mark Zuckerberg testifying before the Senate, and encouraged the public to take a critical look at what happens with our data on social media, how much damage access to our data can cause, and what power we have to control our data.<\/p>\n<p>&nbsp;<\/p>\n<p>Cambridge Analytica used user data and machine learning to build what they called psychographic models. The term psychographic comes from \u201cdemographic.\u201d The idea is that just as users belong to demographics, with whom they share a general trait like age or gender, they also belong to even smaller groups with whom they share psychological traits like conscientiousness, extraversion or neuroticism. <a href=\"https:\/\/www.channel4.com\/news\/exposed-undercover-secrets-of-donald-trump-data-firm-cambridge-analytica\">Hidden camera footage<\/a> published by Britain\u2019s \u201cChannel 4 News\u201d shows Cambridge Analytica salesmen boast that they can predict with great specificity the \u201chopes and fears\u201d of particular users, and subsequently what kinds of political messages would most likely persuade each user. With some or all of those millions of users\u2019 data, and without those users\u2019 consent, Cambridge Analytica trained an algorithm that they claim targeted voters with ads based on their \u201chopes and fears.\u201d Political campaigns, including Ted Cruz\u2019s, and major conservative donors like Robert Mercer have invested millions of dollars in Cambridge Analytica\u2019s services. Even if psychographic micro-targeting isn\u2019t effective yet, there are at least some who find it very promising.<\/p>\n<p>&nbsp;<\/p>\n<p>This phenomenon has sparked fear and outrage among privacy advocates, liberals, and others opposed to Trump. In its defense, Cambridge Analytica has claimed that micro-targeting is not new. Advertisers, political and otherwise, have been tracking users and showing them micro-targeted ads for years now, with little public controversy. <a href=\"https:\/\/twitter.com\/CamAnalytica\/status\/975081782625226752?ref_src=twsrc%5Etfw\">As Cambridge Analytica tweeted<\/a>, \u201cObama&#8217;s 2008 campaign was famously data-driven, pioneered microtargeting in 2012.\u201d<\/p>\n<p>&nbsp;<\/p>\n<div class=\"embed-twitter\">\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Obama&#39;s 2008 campaign was famously data-driven, pioneered microtargeting in 2012, talking to people specifically based on the issues they care about. 6\/8<\/p>\n<p>&mdash; Cambridge Analytica (@CamAnalytica) <a href=\"https:\/\/twitter.com\/CamAnalytica\/status\/975081782625226752?ref_src=twsrc%5Etfw\">March 17, 2018<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/div>\n<p>&nbsp;<\/p>\n<p>It\u2019s true that micro-targeting has been around for several years, and that Obama\u2019s 2008 campaign pioneered micro-targeting in politics. Cambridge Analytica\u2019s response, however, glosses over an important distinction. Unlike other advertisers, who enjoy at least modicum of consent over the user data they collect (maybe the user explicitly consents to give their data to the advertiser by checking a box somewhere, or maybe they implicitly \u201cconsent\u201d by googling a certain retailer) Cambridge Analytica obtained their trove of personal data without any consent from tens of millions of Facebook users. Those who are upset have a right to be. Their personal data were raw materials out of which the Trump campaign built a multi-million-dollar political micro-targeting tool. And, out of 87 million unwitting data donors, none were asked for consent.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>How Cambridge Analytica Made Off with the Data<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>From Christopher Wylie, former Cambridge Analytica developer, we know that in 2015, Cambridge Analytica obtained their trove of user data when a relatively small number of users took a personality quiz through a Facebook app called \u201cThis is Your Digital Life,\u201d and gave the quiz app permission to use their data. At that time, Facebook\u2019s developer API, by design, allowed the quiz app to access not just the personal data of those users who took the quiz, but also the personal data of all of those users\u2019 friends who had never used the quiz app. Once the friends were included, the relatively small number of users who consented via the quiz blosomed into the 87 million since confirmed by Facebook. Most of those 87 million did nothing but have one or more quiz-takers among their friends.<\/p>\n<p>&nbsp;<\/p>\n<p>When this story broke in March of 2018, a Facebook executive <a href=\"https:\/\/twitter.com\/boztank\/status\/975018461997887494?ref_src=twsrc%5Etfw\">defended the company<\/a>, somewhat bewilderingly, by urging the public to see that the incident wasn\u2019t a \u201cdata breach,\u201d but rather that Facebook had allowed Cambridge Analytica access and Cambridge Analytica had merely misused the data that it was allowed access to. It was as if Facebook was stressing there had been no break-in; just that the door had been left open by design and a stranger had walked in and made copies of all your personal documents.<\/p>\n<p>&nbsp;<\/p>\n<p>https:\/\/twitter.com\/boztank\/status\/975018461997887494<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Legal Aftermath<\/strong><\/p>\n<p><strong>\u00a0<\/strong><\/p>\n<p>Plaintiffs have filed a few different lawsuits against Facebook in recent weeks. Facebook investors have sued for value lost as the company\u2019s stock tanked following The New York Times story, and users have filed at least one class action suit that claims the company treated their privacy with \u201cabsolute disregard,\u201d according to <a href=\"https:\/\/www.theverge.com\/2018\/3\/23\/17155754\/facebook-cambridge-analytica-data-breach-scandal\">The Verge<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<p>Whether or not Facebook faces consequences in court for this episode, it has been a wake-up call for citizens of the internet. Senators in Washington D.C. <a href=\"https:\/\/www.reuters.com\/article\/us-facebook-privacy-zuckerberg\/zuckerberg-resists-effort-by-u-s-senators-to-commit-him-to-regulation-idUSKBN1HH1CU\">asked Zuckerberg<\/a> whether or not the government should regulate Facebook to ensure data isn\u2019t misused the same way again. The U.S. may implement tighter data-collection restrictions in the coming years. The European Union already has, with its <a href=\"https:\/\/www.eugdpr.org\">General Data Protection Regulation<\/a> (GDPR), which takes effect at the end of May. GDPR restricts what data companies can collect from users, and guarantees every user the right to request all of their personal data or have all of it deleted from a given data-collector\u2019s systems.<\/p>\n<p>&nbsp;<\/p>\n<p>Data privacy is a civil right. Sir Timothy Berners-Lee, inventor of the world-wide web, has long <a href=\"https:\/\/www.theguardian.com\/technology\/2014\/oct\/08\/sir-tim-berners-lee-speaks-out-on-data-ownership\">advocated<\/a> that users must own their data and be able to find and reclaim it from anyone who holds a copy. A full realization of Berners-Lee\u2019s vision might be a world in which users can, at any time, easily and conveniently see not just every piece of data a company like Facebook has about them (the raw data about where they live, what they like, and who they follow) but also the products that raw data goes in to (like machine learning models and advertising campaigns). In that world, users would actualize their right to know what their data is being used for, and be able to make informed decisions about how they would like to share or protect it. If users or the Facebooks of the world enforce the right to user data and informed consent, the next Cambridge Analytica scandal doesn\u2019t need to happen.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Guest Post by David Meyerson, @dbmeyerson, a Software Engineer at Microsoft and co-teacher of computer science in Boston Public Schools. [&hellip;]<\/p>\n","protected":false},"author":173,"featured_media":11032,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[3,1219,35,1210,42],"tags":[],"coauthors":[1384],"class_list":["post-11031","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-amicus","category-congress","category-guest-author","category-privacy-and-technology","category-voting-and-elections-rights"],"jetpack_featured_media_url":"https:\/\/journals.law.harvard.edu\/crcl\/wp-content\/uploads\/sites\/80\/2018\/04\/iowa-caucus.jpg","jetpack_shortlink":"https:\/\/wp.me\/peZrWS-2RV","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/journals.law.harvard.edu\/crcl\/wp-json\/wp\/v2\/posts\/11031","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/journals.law.harvard.edu\/crcl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/journals.law.harvard.edu\/crcl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/journals.law.harvard.edu\/crcl\/wp-json\/wp\/v2\/users\/173"}],"replies":[{"embeddable":true,"href":"https:\/\/journals.law.harvard.edu\/crcl\/wp-json\/wp\/v2\/comments?post=11031"}],"version-history":[{"count":0,"href":"https:\/\/journals.law.harvard.edu\/crcl\/wp-json\/wp\/v2\/posts\/11031\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/journals.law.harvard.edu\/crcl\/wp-json\/wp\/v2\/media\/11032"}],"wp:attachment":[{"href":"https:\/\/journals.law.harvard.edu\/crcl\/wp-json\/wp\/v2\/media?parent=11031"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/journals.law.harvard.edu\/crcl\/wp-json\/wp\/v2\/categories?post=11031"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/journals.law.harvard.edu\/crcl\/wp-json\/wp\/v2\/tags?post=11031"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/journals.law.harvard.edu\/crcl\/wp-json\/wp\/v2\/coauthors?post=11031"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}