Facebook critics want investigation, regulation after data misuse

This file photo taken in November 2017 shows the Facebook logos. A data company has been accused of hacking into Facebook users' accounts. [AFP]

Facebook Inc faced new calls for regulation from within US Congress and was hit with questions about personal data safeguards after reports a political consultant gained inappropriate access to 50 million users' data starting in 2014.

Facebook disclosed the issue in a blog post on Friday, hours before media reports that conservative-leaning Cambridge Analytica, a data company known for its work on Donald Trump's 2016 presidential campaign, was given access to the data and may not have deleted it.

The scrutiny presented a new threat to Facebook's reputation, which was already under attack over Russians' alleged use of Facebook tools to sway American voters before and after the 2016 US elections.

"It's clear these platforms can't police themselves," Democratic US Senator Amy Klobuchar tweeted.

"They say 'trust us.' Mark Zuckerberg needs to testify before Senate Judiciary," she added, referring to Facebook's CEO and a committee she sits on.

Facebook said the root of the problem was that researchers and Cambridge Analytica lied to it and abused its policies, but critics on Saturday threw blame at Facebook as well, demanding answers on behalf of users and calling for new regulation.

Facebook insisted the data was misused but not stolen, because users gave permission, sparking a debate about what constitutes a hack that must be disclosed to customers.

"The lid is being opened on the black box of Facebook's data practices, and the picture is not pretty," said Frank Pasquale, a University of Maryland law professor who has written about Silicon Valley's use of data.

Pasquale said Facebook's response that data had not technically been stolen seemed to obfuscate the central issue that data was apparently used in a way contrary to users' expectations.

"It amazes me that they are trying to make this about nomenclature. I guess that's all they have left," he said.

Democratic US Senator Mark Warner said the episode bolstered the need for new regulations about internet advertising, describing the industry as the "Wild West."

"Whether it's allowing Russians to purchase political ads, or extensive micro-targeting based on ill-gotten user data, it's clear that, left unregulated, this market will continue to be prone to deception and lacking in transparency," he said.

With Republicans controlling the Senate's majority, though, it was not clear if Klobuchar and Warner would prevail. The New York Times and London's Observer reported on Saturday that private information from more than 50 million Facebook users improperly ended up in the hands of Cambridge Analytica, and the information has not been deleted despite Facebook's demands beginning in 2015.

Some 270,000 people allowed use of their data by a researcher, who scrapped the data of all their friends as well, a move allowed by Facebook until 2015. The researcher sold the data to Cambridge. This was against Facebook rules, the newspapers said.

Cambridge Analytica worked on Trump's campaign. A Trump campaign official said, though, that it used Republican data sources, not Cambridge Analytica, for its voter information.

Facebook, in a series of written statements beginning late on Friday, said its policies had been broken by Cambridge Analytica and researchers and that it was exploring legal action.

Cambridge Analytica in turn said it had deleted all the data and that the company supplying it had been responsible for obtaining it.