Facebook Inc faced new calls for regulation from within US Congress and was hit with questions about personal data safeguards on Saturday after reports a political consultant gained inappropriate access to 50 million users’ data starting in 2014.
Facebook disclosed the issue in a blog post on Friday, hours before media reports that conservative-leaning Cambridge Analytica, a data company known for its work on Donald Trump’s 2016 presidential campaign, was given access to the data and may not have deleted it.
The scrutiny presented a new threat to Facebook’s reputation, which was already under attack over Russians’ alleged use of Facebook tools to sway American voters before and after the 2016 US elections, reports Reuters.
“It’s clear these platforms can’t police themselves,” Democratic US Senator Amy Klobuchar tweeted.
“They say ‘trust us.’ Mark Zuckerberg needs to testify before Senate Judiciary,” she added, referring to Facebook’s CEO and a committee she sits on.
Facebook said the root of the problem was that researchers and Cambridge Analytica lied to it and abused its policies, but critics on Saturday threw blame at Facebook as well, demanding answers on behalf of users and calling for new regulation.
Facebook insisted the data was misused but not stolen, because users gave permission, sparking a debate about what constitutes a hack that must be disclosed to customers.
Democratic US Senator Mark Warner said the episode bolstered the need for new regulations about internet advertising, describing the industry as the “Wild West.”
“Whether it’s allowing Russians to purchase political ads, or extensive micro-targeting based on ill-gotten user data, it’s clear that, left unregulated, this market will continue to be prone to deception and lacking in transparency,” he said.
With Republicans controlling the Senate’s majority, though, it was not clear if Klobuchar and Warner would prevail.
The New York Times and London’s Observer reported on Saturday that private information from more than 50 million Facebook users improperly ended up in the hands of Cambridge Analytica, and the information has not been deleted despite Facebook’s demands beginning in 2015.
Some 270,000 people allowed use of their data by a researcher, who scraped the data of all their friends as well, a move allowed by Facebook until 2015. The researcher sold the data to Cambridge, which was against Facebook rules, the newspapers said.
Cambridge Analytica worked on Trump’s 2016 campaign. A Trump campaign official said, though, that it used Republican data sources, not Cambridge Analytica, for its voter information.
Facebook, in a series of written statements beginning late on Friday, said its policies had been broken by Cambridge Analytica and researchers and that it was exploring legal action.
Cambridge Analytica in turn said it had deleted all the data and that the company supplying it had been responsible for obtaining it.