Canada’s privacy commissioner, Daniel Therrien, has stated his office will contact Facebook to see whether Canadians were broadly affected by the now infamous Cambridge Analytica data breach.
In a statement to press, Therrien stated: “Recent media reports regarding the use of personal information posted on Facebook for political purposes raise serious privacy concerns.”
Therrien also stated his office will assist as appropriate with the related investigation by the UK Information Commissioner’s Office.
Cambridge Analytica, a political data analytics firm, reportedly harvested 50 million people’s Facebook data without authorization in 2014. The firm subsequently worked with senator Ted Cruz and President Trump’s Republican campaigns in the 2016 US election. The news was reported last week by The New York Times and Britain’s The Observer, featuring interviews with whistleblower Chris Wylie, a 28-year-old Canadian who helped found Cambridge Analytica.
The news was reported last week by The New York Times and Britain’s The Observer, featuring interviews with Wylie.
The Privacy Commissioner of Canada today issued this statement re: @facebook scandal pic.twitter.com/RY2loCuQL3
— Michel Boyer (@BoyerMichel) March 19, 2018
Wylie said he formed a partnership in 2013 with Dr. Aleksandr Kogan, a Cambridge University academic who developed a Facebook personality test app called “thisisyourdigitallife.”
270,000 people downloaded and used the app, giving over not only their own information, but that of their friends with low privacy settings.
Facebook’s rules at that time allowed for such data gathering, but not passing it to third parties, like political campaigns.
Facebook told The Times it was assured the data had been destroyed after it investigated following a report from The Guardian emerged in late 2015. Cambridge Analytica, meanwhile, blames Dr. Kogan for gathering the data improperly, and says it deleted the data two years ago — though The Times’ sources claim otherwise.
In his statement, Therrien notes that Canada’s federal private sector privacy law, PIPEDA, generally requires consent for the collection, use and disclosure of personal information in the course of commercial activities, but doesn’t apply to political parties. Nor does Canada’s federal public sector privacy law, the Privacy Act.
The privacy commissioner reports his office has asked parliament to consider regulation the collection, use, and disclosure of personal information by political parties.
This article was originally published on MobileSyrup