Penn Undergraduate Law Journal
  • Home
  • About
    • Mission
    • Masthead
    • Faculty Advisory Board
    • Partner Journals
    • Sponsors
  • Submissions
  • Full Issues
  • The Roundtable
    • Pre-Law Corner
  • Events
  • Contact
    • Contact
    • Apply
    • FAQs
  • Home
  • About
    • Mission
    • Masthead
    • Faculty Advisory Board
    • Partner Journals
    • Sponsors
  • Submissions
  • Full Issues
  • The Roundtable
    • Pre-Law Corner
  • Events
  • Contact
    • Contact
    • Apply
    • FAQs

The Roundtable


Welcome to the Roundtable, a forum for incisive commentary and analysis
on cases and developments in law and the legal system.


INTERESTED IN wRITING FOR tHE rOUNDTABLE?

Facebook Lawsuits Spark Action towards Establishing Privacy Laws

9/26/2019

1 Comment

 
Picture
By Rachel Gu
Rachel Gu is a sophomore in the School of Engineering and Applied Sciences at the University of Pennsylvania studying Bioengineering.


As of 2019, about four out of every five people in the U.S. have a registered social media account [1]. Each user’s actions online, such as a “like” or “share” of posts on their feed, are collected as data points. This network of data is then used to create a comprehensive user profile that provides Facebook and other partnered companies useful information. This then allows them to tailor posts and ads to each individual user. In fact, more companies use this “data mining” technique than one might expect. Their intention, to optimize user engagement, has provoked debates regarding privacy agreements between companies and their users.
Data mining is the process of finding patterns within large data sets to predict outcomes [2]. Companies can use this technique with their user data to increase revenues, cut costs, and boost customer satisfaction. Although businesses are entitled to use this data for company growth, problems arise when they sell individual data to other businesses without user consent. 

This invasive procedure has been conducted for years [3], but the shocking outcome of the 2016 Presidential election sparked mass curiosity in privacy agreements. After President Donald Trump was elected, Facebook was accused of selling personal data that gave Trump an unfair political advantage. The key company involved was Cambridge Analytica, a data analysis firm that collected over 50 million users’ data to build voter profiles for the Trump political campaign [4].  Investigators found that ads concerning immigration, gun rights, and race were tailored towards right-leaning, conservative Facebook users [5]. Furthermore, there were efforts to disenfranchise the left-leaning African-American voters through misinformation about the electoral process.

Just one week after news headlines revealed Cambridge Analytica’s mass data harvest in late March 2018, acclaimed Lawyer Jay Edelson jumped on the case. Using his expertise in privacy-related class action litigation, he filed a lawsuit against Facebook for engaging in unfair and deceptive conduct. 

Here’s the catch: to avoid claims that he has no standing to sue—as is common with privacy cases—Edelson is representing the entire population of Illinois. Cook County State Attorney Kimberly Foxx had first filed the consumer fraud suit against Facebook and Cambridge Analytica on behalf of The People of Illinois. However, the People brought Edelson on the case as an outside attorney [6]. 

He claims that Facebook violated the Illinois Consumer Fraud and Deceptive Business Practices Act. Violating this act results in massive consequences, namely $50,000 in civil penalties per person violated and a lost business license to operate in the state [7]. Losing this lawsuit would result in billions of dollars forfeited as well as discontinued business in the fifth biggest state in the country.

Despite these strong allegations, the Plaintiff is still finding difficulty in proving that Facebook has indeed broken the law. As aforementioned, data trafficking is technically within a company’s right. According to Spokeo v. Robins, a 2016 U.S. Supreme Court Case, on which Edelson also worked, the plaintiff must show that they have suffered from an injury-in-fact traceable to the defendant’s alleged misconduct. An injury-in-fact is an invasion of legally protected interests which led to a concrete, imminent injury [8]. In this case, the most Facebook users suffered was the display of tailored ads on their newsfeed.

Since this large political privacy scandal, federal prosecutors have conducted criminal investigations into Facebook’s deals with other technology companies. They found that Facebook had provided user data to more than 150 companies, including large firms such as Apple, Sony, Amazon, and Microsoft. The deals allowed these businesses to access users’ contact information, friends, and other data, sometimes without their consent [9]. 

Consequently, some state governments are now proactively addressing consumer privacy. California passed the California Consumer Privacy Act on June 28th, 2018, which will go into full effect on January 1st, 2020. Described as the strongest privacy legislation enacted in any of the U.S. states, this law gives California residents the right to know the personal data collected as well as to refuse the sale of personal data [10]. 

A Vermont statute regarding data protection was also recently enacted under Chapter 62: Protection of Personal Information: Data Brokers. This state law requires data brokers—businesses that collect consumer information and sell it to other organizations—to register annually with the Secretary of State and notify the consumers of ways to opt-out. Furthermore, data brokers must remain transparent about the administrative, technical, and physical methods they use to protect personally identifiable information. They must record these security measures in a written program [11].

Despite various state governments passing privacy laws, the U.S. currently has no federal legislation that mandates consistent privacy regulations across state borders. 

In 2012, the Obama administration attempted to address this national privacy issue. The administration proposed a consumer privacy “bill of rights,” which required companies to be transparent about their data collection methods as well as provide consumers more agency over their collected data. Obama’s team took three years to release a privacy bill draft, and Congress never came close to legislation. Organizations backing large tech companies like Google and Facebook, along with other smaller tech companies, lobbied against these new privacy rules that would regulate targeted ads [12]. In the end, Obama’s efforts towards increased consumer privacy failed.

Now, the Trump administration is proposing a federal privacy protection policy in another attempt to establish a nationwide regulation. The EU General Data Protection Regulation (GDPR) has already set a precedent for homogenizing data privacy laws across a region. This regulation allows individuals the right to their collected data (i.e. information about how the data is used, right to erase data, right to sell data), increases penalties for breaching privacy, and sets a standard for internal record keeping requirements [13]. 

Aiming for a policy more lenient than the GDPR, the White House National Economic Council hopes to generate a consumer privacy protection policy that focuses on a flexible risk-based rather than a rigid rule-based approach. This policy calls for appropriate risk-management to ensure desired privacy outcomes, rather than strictly mandating detailed regulations. This approach allows businesses to innovate while ensuring that consumers can control their data privacy [14]. Trump’s team hopes to work with Congress to implement legislation in accordance with the policy. 

While Obama’s past efforts towards establishing national privacy policies fell short, the current social and political climate differs greatly from that of 7 years ago. With the steps already taken, such as the EU GDPR as well as California’s Consumer Privacy Act, the Trump Administration’s efforts towards a federal privacy protection policy hold higher hopes for reaching an end.

Reference
[1] U.S. Population with a Social Media Profile 2019. (n.d.). Retrieved from https://www.statista.com/statistics/273476/percentage-of-us-population-with-a-social-network-profile/
[2] What is Data Mining? (n.d.). Retrieved from https://www.sas.com/en_us/insights/analytics/data-mining.html
[3] Uzialko, A. C. (2018, August 03). How and Why Businesses Collect Consumer Data. Retrieved from https://www.businessnewsdaily.com/10625-businesses-collecting-data.html
[4] Graham-Harrison, E., & Cadwalladr, C. (2018, March 17). Revealed: 50 million Facebook profiles harvested for Cambridge Analytica in major data breach. Retrieved from https://www.theguardian.com/news/2018/mar/17/cambridge-analytica-facebook-influence-us-election
[5] Russia 'meddled in all big social media' around US election. (2018, December 17). Retrieved from https://www.bbc.com/news/technology-46590890
[6] State's Attorney Foxx Files Lawsuit Against Facebook and Cambridge Analytica. (2018, March 26). Retrieved from https://www.cookcountystatesattorney.org/news/states-attorney-foxx-files-lawsuit-against-facebook-and-cambridge-analytica
[7] Gardner, E. (2019, January 10). How an Experimental Billion-Dollar Privacy Lawsuit Could Clobber Facebook. Retrieved from https://www.hollywoodreporter.com/features/how-an-experimental-billion-dollar-lawsuit-could-clobber-facebook-1174468
[8] Spokeo, Inc. v. Robins. (n.d.). Retrieved from https://www.oyez.org/cases/2015/13-1339
[9] Laforgia, M., Rosenberg, M., & X, G. J. (2019, March 13). Facebook's Data Deals Are Under Criminal Investigation. Retrieved from https://www.nytimes.com/2019/03/13/technology/facebook-data-deals-investigation.html?module=inline
[10] De Groot, J. (2019, July 15). What is the California Consumer Privacy Act? Retrieved from https://digitalguardian.com/blog/what-california-data-privacy-protection-act
[11] Vermont Laws. (n.d.). Retrieved from https://legislature.vermont.gov/statutes/section/09/062/02447
[12] Romm, T. (2018, July 27). The Trump administration is talking to Facebook and Google about potential rules for online privacy. Retrieved from https://www.washingtonpost.com/technology/2018/07/27/trump-administration-is-working-new-proposal-protect-online-privacy/?utm_term=.cf9a3859f09b
[13] GDPR Key Changes. (n.d.). Retrieved from https://eugdpr.org/the-regulation/
[14] Raul, A. C., & Fonzone, C. (2018, October 2). The Trump Administration's Approach to Data Privacy, and Next Steps. Retrieved from https://datamatters.sidley.com/the-trump-administrations-approach-to-data-privacy-and-next-steps/


The opinions and views expressed in this publication are the opinions of the designated authors and do not reflect the opinions or views of the Penn Undergraduate Law Journal, our staff, or our clients.

1 Comment
Rainbow
10/4/2019 02:30:37 pm

Data mining, data privacy are very hot topics, I learnt a lot from this article.

Reply

Your comment will be posted after it is approved.


Leave a Reply.


    Categories

    All
    Akshita Tiwary
    Alana Bess
    Alana Mattei
    Albert Manfredi
    Alexander Saeedy
    Alexandra Aaron
    Alexandra Kanan
    Alice Giannini
    Alicia Augustin
    Alicia Kysar
    Ally Kalishman
    Ally Margolis
    Alya Abbassian
    Anika Prakash
    Anna Schwartz
    Ashley Kim
    Astha Pandey
    Audrey Pan
    Benjamin Ng'aru
    Brónach Rafferty
    Bryce Klehm
    Cary Holley
    Christina Gunzenhauser
    Christine Mitchell
    Christopher Brown
    Clarissa Alvarez
    Cole Borlee
    Connor Gallagher
    Dan Spinelli
    Dan Zhang
    David Katz
    Davis Berlind
    Derek Willie
    Dhilan Lavu
    Edgar Palomino
    Edna Simbi
    Ella Sohn
    Emma Davies
    Esther Lee
    Evelyn Bond
    Filzah Belal
    Frank Geng
    Gabriel Maliha
    Georgia Ray
    Graham Reynolds
    Habib Olapade
    Hailie Goldsmith
    Haley Son
    Harshit Rai
    Henry Lininger
    Hetal Doshi
    Iris Zhang
    Irtaza Ali
    Isabela Baghdady
    Ishita Chakrabarty
    Jack Burgess
    Jessica "Lulu" Lipman
    Joe Anderson
    Jonathan Lahdo
    Jonathan Stahl
    Joseph Squillaro
    Justin Yang
    Kaitlyn Rentala
    Kanishka Bhukya
    Katie Kaufman
    Kelly Liang
    Keshav Sharma
    Ketaki Gujar
    Lauren Pak
    Lavi Ben Dor
    Libby Rozbruch
    Lindsey Li
    Luis Bravo
    Lyndsey Reeve
    Madeline Decker
    Maja Cvjetanovic
    Maliha Farrooz
    Marco DiLeonardo
    Margaret Lu
    Matthew Caulfield
    Michael Keshmiri
    Mina Nur Basmaci
    Muskan Mumtaz
    Natalie Peelish
    Natasha Darlington
    Natasha Kang
    Nayeon Kim
    Nicholas Parsons
    Nicholas Williams
    Nicole Greenstein
    Nihal Sahu
    Omar Khoury
    Owen Voutsinas Klose
    Owen Voutsinas-Klose
    Pheby Liu
    Rachel Bina
    Rachel Gu
    Rachel Pomerantz
    Rebecca Heilweil
    Regina Salmons
    Sajan Srivastava
    Sandeep Suresh
    Sanjay Dureseti
    Sarah Simon
    Saranya Das Sharma
    Saranya Sharma
    Sasha Bryski
    Saxon Bryant
    Sean Foley
    Sebastian Bates
    Serena Camici
    Shahana Banerjee
    Shannon Alvino
    Shiven Sharma
    Siddarth Sethi
    Sneha Parthasarathy
    Sneha Sharma
    Sophie Lovering
    Steven Jacobson
    Suaida Firoze
    Suprateek Neogi
    Takane Shoji
    Tanner Bowen
    Taryn MacKinney
    Thomas Cribbins
    Todd Costa
    Tyler Larkworthy
    Vatsal Patel
    Vikram Balasubramanian
    Vishwajeet Deshmukh
    Wajeeha Ahmad
    Yeonhwa Lee

    Archives

    March 2023
    January 2023
    December 2022
    November 2022
    September 2022
    June 2022
    March 2022
    February 2022
    January 2022
    December 2021
    November 2021
    May 2021
    April 2021
    March 2021
    February 2021
    January 2021
    December 2020
    November 2020
    October 2020
    July 2020
    June 2020
    May 2020
    April 2020
    March 2020
    February 2020
    December 2019
    November 2019
    October 2019
    September 2019
    August 2019
    July 2019
    May 2019
    April 2019
    March 2019
    January 2019
    December 2018
    November 2018
    October 2018
    September 2018
    August 2018
    July 2018
    June 2018
    May 2018
    April 2018
    March 2018
    February 2018
    December 2017
    November 2017
    October 2017
    August 2017
    July 2017
    May 2017
    April 2017
    March 2017
    February 2017
    January 2017
    December 2016
    November 2016
    October 2016
    September 2016
    August 2016
    July 2016
    June 2016
    April 2016
    March 2016
    February 2016
    December 2015
    November 2015
    October 2015
    September 2015
    August 2015
    July 2015
    June 2015
    May 2015
    April 2015
    March 2015
    February 2015
    November 2014
    October 2014
    August 2014
    July 2014
    June 2014
    May 2014
    April 2014
    March 2014
    December 2013
    November 2013
    October 2013
    September 2013

Picture
Picture
​