Case Study - Facebook and Cambridge Analytica

The data was initially acquired through a thirdparty app named "This Is Your Digital Life." Cambridge Analytica leveraged the harvested data to create psychographic profiles, intending to influence political opinions and behaviors. The information was allegedly used to target voters during major political events such as the 2016 U.S. presidential election and the Brexit referendum.

The Cambridge Analytica scandal highlighted the challenges and risks associated with the extensive collection of personal data by online platforms and underscored the importance of robust data protection measures and user consent in the digital ecosystem.

Facebook, the platform through which the data was accessed, faced criticism for inadequate data protection measures and a failure to ensure that third-party apps adhered to its policies. The incident triggered global investigations into the matter, prompting discussions on data privacy, user consent, and ethical considerations in the digital age.

Governments worldwide scrutinized Facebook's role, and the aftermath of the scandal led to tightened datasharing policies on the social media giant. The incident had a profound impact on Facebook's reputation, sparking conversations about the need for stronger regulations and oversight within the tech industry to safeguard user privacy.

Managing Requirements

Facebook had policies in place regarding the collection and sharing of user data. However, there were lapses in managing these requirements, and the data was improperly accessed without users' explicit consent.

Data Security Restrictions

The incident revealed weaknesses in data security restrictions. Cambridge Analytica exploited loopholes in Facebook's platform, allowing them to access and collect data beyond the intended restrictions.

Safeguarding Privacy

The scandal raised concerns about the safeguarding of user privacy. Users' personal data was misused without their knowledge, highlighting the importance of robust privacy safeguards and controls.

Asset Retention

The improper retention of user data by third-party entities (like Cambridge Analytica) showcased the risks associated with inadequately managing the retention of assets. Unused or unnecessary data should have been appropriately disposed of to prevent unauthorized access.

Categorization and Possession of Data

The incident involved the unauthorized categorization and possession of vast amounts of user data. Cambridge Analytica, through Facebook, obtained and possessed data categorized based on users' preferences, behaviors, and demographics.