Facebook fined a paltry £500,000 (8 minutes’ revenue) over Cambridge Analytica scandal

The UK’s Information Commissioner’s Office (ICO) has announced that Facebook will be fined £500,000 – the maximum amount possible – for two breaches of the Data Protection Act 1998 in connection with the Cambridge Analytica scandal.

You’ll remember that Cambridge Analytica burst onto the front pages of the newspapers after it emerged that an app had harvested the profiles of 87 million Facebook users.

According to the ICO, Facebook broke the law by failing to safeguard people’s information, and also failed to be transparent about how users’ data could be harvested by others.

In a tweet, journalist Charles Arthur pointed out that the £500,000 was not going to worry Facebook one jot, as it amounted to less than ten minutes’ worth of revenue for the company.

Let’s try again.
Based on 2017 revenue of $40.6bn = £30.5bn, that’s £58k per minute.
So £500k fine = 8 mins revenue.
£1.2bn fine = 20,713 mins = 354hr = 14 days 9hr.
Serious, but still not quite calamitous. https://t.co/uM7OI2j1wO

— Charles Arthur (@charlesarthur) July 11, 2018

£500,000 to Facebook isn’t even a mosquito bite. It’s barely a drop in the ocean. If Facebook had been fined under Europe’s new GDPR rules the maximum penalty could have been as much as £1.2 billion.

Even £1.2 billion would only amount (and I’m taking Charles’s word for this, as my maths is rubbish) to around 14.5 days’ revenue for the internet giant.

The ICO’s £500,000 fine for Facebook comes as part of a broader investigation into whether personal data was misused by campaigns on both sides of UK’s Brexit referendum, and includes political parties, data analytics parties, as well as social media platforms.

Whistleblower Christopher Wylie didn’t mince his words.

Just to sum up. 1) Facebook broke the law. 2) Cambridge Analytica broke the law. 3) Vote Leave broke the law. 4) LeaveEU broke the law. 5) Brexit and Trump were both won through breaking the law. 6) Facebook let it all happen and covered it up. https://t.co/CAOrP5rKry

— Christopher Wylie 🏳️‍🌈 (@chrisinsilico) July 11, 2018

Now feels like an appropriate juncture to point you towards the “Smashing Security” podcast about how to quit Facebook.

For much more information and background on the controversy surrounding Facebook and Cambridge Analytica, read the following articles:

• Revealed: 50 million Facebook profiles harvested for Cambridge Analytica in major data breach
• ‘I created Steve Bannon’s psychological warfare tool’: meet the data war whistleblower
• How Trump Consultants Exploited the Facebook Data of Millions

Further reading: Cambridge Analytica controversy: Was there a Facebook data breach?

Found this article interesting? Follow Graham Cluley on Twitter, Mastodon, or Threads to read more of the exclusive content we post.

Graham Cluley •   @gcluley

Graham Cluley is an award-winning keynote speaker who has given presentations around the world about cybersecurity, hackers, and online privacy. A veteran of the computer security industry since the early 1990s, he wrote the first ever version of Dr Solomon's Anti-Virus Toolkit for Windows, makes regular media appearances, and is the co-host of the popular "Smashing Security" podcast. Follow him on Twitter, Mastodon, Threads, Bluesky, or drop him an email.