Wednesday, 9 January 2019

Cambridge Analytica’s parent pleads guilty to breaking UK data law

Cambridge Analytica’s parent company, SCL Elections, has been fined £15,000 in a UK court after pleading guilty to failing to comply with an enforcement notice issued by the national data protection watchdog, the Guardian reports.

While the fine itself is a small and rather symbolic one, given the political data analytics firm went into administration last year, the implications of the prosecution are more sizeable.

Last year the Information Commissioner’s Office ordered SCL to hand over all the data it holds on U.S. academic, professor David Carroll, within 30 days. After the company failed to do so it was taken to court by the ICO.

Prior to Cambridge Analytica gaining infamy for massively misusing Facebook user data, the company, which was used by the Trump campaign, claimed to have up to 7,000 data points on the entire U.S. electorate — circa 240M people.

So Carroll’s attempt to understand exactly what data the company had on him, and how the information was processed to create a voter profile of it, has much wider relevance.

Under EU law, citizens can file a Subject Access Request (SAR) to obtain personal data held on them. So Carroll, a U.S. citizen, decided to bring a test case by requesting his data even though he is not a UK citizen — having learnt Cambridge Analytica had processed his personal data in the U.K.

He lodged his original SAR in January 2017 after becoming suspicious about the company’s claim to have built profiles of every U.S. voter.

Cambridge Analytica responded to the SAR in March 2017 but only sent partial data. So Carroll complained to the ICO which backed his request — issuing an enforcement notice on SCL Elections in May 2018, days after the (now) scandal-hit company announced it was shutting down.

No comments:

Post a Comment