This website has been created to provide information about a claim against Facebook for allowing third parties to obtain users’ personal data without their knowledge or consent. This claim seeks financial compensation on behalf of the affected Facebook users for the loss of control over their data.
You may have heard about the Facebook-Cambridge Analytica data scandal, an incident where millions of Facebook users’ personal data was acquired by Cambridge Analytica through an app called thisisyourdigitallife operating on the Facebook platform in the period between November 2013 and May 2015. In what was described by the ICO as a “very serious data incident,” and by The Times as “one of the largest data leaks in the social network’s history”, Facebook permitted this app to harvest the personal information of not only the users of the thisisyourdigitallife app, but also their Facebook friends. Where the app collected information about the Facebook friends of its users, those friends were not informed that the app was being given access to that data and were not asked to provide their consent. Overall, Facebook itself estimates that at least 1 million UK users were affected.
Data harvested in this way, without consent or even knowledge, included things like name, gender, location, photographs, and pages liked. At least some of the data shared is likely to have been used in connection with or for the purposes of political campaigning.
In October 2018, the Information Commissioner’s Office fined Facebook £500,000 in respect of this conduct, the maximum penalty available. The Information Commissioner Elizabeth Denham stated:
- “Facebook failed to sufficiently protect the privacy of its users before, during and after the unlawful processing of this data. A company of its size and expertise should have known better and it should have done better...
- We considered these contraventions to be so serious we imposed the maximum penalty under the previous legislation… One of our main motivations for taking enforcement action is to drive meaningful change in how organisations handle people’s personal data...”