LONDON – The United Kingdom’s Information Commissioner’s Office has fined Facebook for failing to protect personal information of at least one million users in the country between 2007-2014.
The regulator said that it has issued a 500,000 pound ($646,315) fine, the maximum allowed under laws which applied at the time. This is part of a wide-ranging investigation into the use of data analytics for political purposes, the ICO said.
Between 2007-2014, Facebook processed the personal information of users unfairly by allowing application developers access to their information without sufficiently clear and informed consent, the ICO said. The probe also found that Facebook failed to keep users’ personal information secure, the regulator said.
Even after the misuse of data was discovered in December 2015, Facebook failed to do enough to ensure those who continued to hold the information had taken remedies, including deletion, the ICO said. In the case of SCL Group, the parent company of Cambridge Analytica – which was involved in political campaigning in the United States –, Facebook didn’t suspend the company from its platform until 2018, the ICO said.