WEBVTT - Will Facebook Face Record Fines Over Privacy Violations?

0:00:03.520 --> 0:00:07.040
<v Speaker 1>Welcome to the Bloomberg Law Podcast. I'm June Grosso. Every

0:00:07.120 --> 0:00:09.680
<v Speaker 1>day we bring you insight and analysis into the most

0:00:09.720 --> 0:00:12.200
<v Speaker 1>important legal news of the day. You can find more

0:00:12.240 --> 0:00:16.160
<v Speaker 1>episodes of the Bloomberg Law Podcast on Apple podcast, SoundCloud

0:00:16.280 --> 0:00:19.840
<v Speaker 1>and on Bloomberg dot com slash podcasts. You'd never guess

0:00:19.880 --> 0:00:23.400
<v Speaker 1>from Facebook's repeated privacy scandals that the company has been

0:00:23.520 --> 0:00:26.639
<v Speaker 1>under consent agreement with the Federal Trade Commission over a

0:00:26.680 --> 0:00:31.240
<v Speaker 1>privacy breach since twenty eleven. But now users, lawmakers, and

0:00:31.320 --> 0:00:35.360
<v Speaker 1>data security advocates are demanding a forceful government response, and

0:00:35.479 --> 0:00:38.159
<v Speaker 1>that job mainly falls to the chairman of the FTC.

0:00:38.880 --> 0:00:41.920
<v Speaker 1>Joining me is an expert in privacy law, Joel Riidenberger,

0:00:41.920 --> 0:00:46.120
<v Speaker 1>Professor at Fordham Law School. Joel, is Facebook the worst

0:00:46.240 --> 0:00:49.320
<v Speaker 1>offender of privacy in the world of social media or

0:00:49.400 --> 0:00:52.960
<v Speaker 1>are we just hearing more about its violations. That's a

0:00:53.000 --> 0:00:57.120
<v Speaker 1>great question. It's not really clear. I think Facebook probably

0:00:57.200 --> 0:01:01.960
<v Speaker 1>has the largest number of users, so any large scale

0:01:02.080 --> 0:01:08.080
<v Speaker 1>violation that Facebook does will affect more people than most

0:01:08.120 --> 0:01:11.360
<v Speaker 1>other organizations. I think some of the big companies like

0:01:11.400 --> 0:01:16.640
<v Speaker 1>Google and Amazon are also facing issues, but we certainly

0:01:16.680 --> 0:01:22.080
<v Speaker 1>hear more about Facebook because of their behavior. Sources are

0:01:22.080 --> 0:01:25.360
<v Speaker 1>telling Bloomberg that the FTC is expected to hit Facebook

0:01:25.400 --> 0:01:30.319
<v Speaker 1>with the record fine in the current investigation involving Cambridge Analytica.

0:01:30.400 --> 0:01:34.640
<v Speaker 1>What can you tell us about that investigation? Well, Facebook

0:01:34.840 --> 0:01:37.160
<v Speaker 1>settled with the FTC a number of years ago. There

0:01:37.200 --> 0:01:41.679
<v Speaker 1>was two thousand eleven for essentially collecting and sharing information

0:01:41.720 --> 0:01:46.240
<v Speaker 1>from its users without proper consent, and it certainly seems

0:01:46.240 --> 0:01:49.600
<v Speaker 1>for what's been made publicly available, that's exactly what happened

0:01:49.600 --> 0:01:52.320
<v Speaker 1>in Cambridge Analytica, along with a whole series of other

0:01:52.360 --> 0:01:56.080
<v Speaker 1>scandals this year. That's not the only one. Cambridge Analytica

0:01:56.080 --> 0:02:00.440
<v Speaker 1>affected about eighty seven million users. For the ft SEE

0:02:00.440 --> 0:02:06.720
<v Speaker 1>to really show that it matters as a privacy enforcement agency,

0:02:07.120 --> 0:02:10.359
<v Speaker 1>they're going to have to issue a quite substantial fine.

0:02:10.520 --> 0:02:14.359
<v Speaker 1>And Facebook has revenue of what approximately fifty billion dollars

0:02:14.760 --> 0:02:18.280
<v Speaker 1>in the last year, So if it's anything like the

0:02:18.320 --> 0:02:23.080
<v Speaker 1>fines that the FTC has issued thus far for privacy violations,

0:02:23.680 --> 0:02:26.080
<v Speaker 1>it's chunk changed for Facebook. I mean, this is going

0:02:26.120 --> 0:02:29.200
<v Speaker 1>to have to be a fine in the nine figures

0:02:29.440 --> 0:02:33.480
<v Speaker 1>for it to actually be taken seriously. Do find even

0:02:33.560 --> 0:02:36.240
<v Speaker 1>work with a company like Facebook. They haven't worked in

0:02:36.280 --> 0:02:39.000
<v Speaker 1>the past so some people are calling for it to

0:02:39.040 --> 0:02:42.519
<v Speaker 1>have a privacy law. Others are calling for breakup of Facebook.

0:02:42.600 --> 0:02:45.320
<v Speaker 1>What do you think is needed, Well, there's no question

0:02:45.360 --> 0:02:47.880
<v Speaker 1>that we need a stronger privacy laws in the United

0:02:47.919 --> 0:02:51.560
<v Speaker 1>States to deal with these kinds of problems. The fine,

0:02:51.720 --> 0:02:55.120
<v Speaker 1>if the fine is sufficient enough, it might be successful

0:02:55.520 --> 0:02:59.000
<v Speaker 1>in changing a company like Facebook. But something else. You know,

0:02:59.480 --> 0:03:02.360
<v Speaker 1>we just don't have the capacity right now, and the

0:03:02.440 --> 0:03:06.120
<v Speaker 1>FTC doesn't to deal with all of the different scandals

0:03:06.120 --> 0:03:08.040
<v Speaker 1>that Facebook was involved in this year. I mean, you

0:03:08.080 --> 0:03:12.520
<v Speaker 1>have Cambridge ANALYTICAUP, you have Facebook. Uh. It was exposed

0:03:12.520 --> 0:03:15.840
<v Speaker 1>that they were tracking non Facebook users across the web,

0:03:15.880 --> 0:03:19.600
<v Speaker 1>they were tracking logged out users across the web. They

0:03:19.600 --> 0:03:25.440
<v Speaker 1>were capturing call history of clients. They bought What's Apped,

0:03:25.440 --> 0:03:29.560
<v Speaker 1>and the co founder this past year quit essentially in

0:03:29.639 --> 0:03:34.920
<v Speaker 1>discuss because of their data misuse. Facebook tries to capture

0:03:35.640 --> 0:03:41.640
<v Speaker 1>telephone numbers, claiming they needed it for dual factor security

0:03:41.760 --> 0:03:44.880
<v Speaker 1>to make your account more secure, and then it turns

0:03:44.880 --> 0:03:47.200
<v Speaker 1>out they turned around and use those phone numbers for

0:03:47.280 --> 0:03:50.880
<v Speaker 1>all sorts of other purposes that weren't disclosed. That's a

0:03:50.960 --> 0:03:56.000
<v Speaker 1>huge problem. They've been involved in manipulating the elections in

0:03:56.000 --> 0:03:58.840
<v Speaker 1>the United States and they knew about it and denied it.

0:03:59.400 --> 0:04:04.120
<v Speaker 1>We saw the the press reports that Cheryl Sandberg knew

0:04:04.160 --> 0:04:08.520
<v Speaker 1>of the Russian election activities, and she publicly denied it,

0:04:08.680 --> 0:04:12.400
<v Speaker 1>and she privately tried to stop the investigation. You know,

0:04:12.440 --> 0:04:15.680
<v Speaker 1>all of these sorts of things are occurring, I think

0:04:15.720 --> 0:04:20.839
<v Speaker 1>in large part because the tech giants have built a

0:04:21.320 --> 0:04:31.040
<v Speaker 1>economic model on monetizing individuals data essentially without their effective consent,

0:04:31.320 --> 0:04:33.400
<v Speaker 1>and that's a problem. We need to be able to

0:04:33.400 --> 0:04:36.320
<v Speaker 1>address that effectively in this country. So what about the

0:04:36.360 --> 0:04:40.680
<v Speaker 1>privacy experts who are calling for breaking up Facebook? Is

0:04:40.720 --> 0:04:43.680
<v Speaker 1>that even a possibility that the FTC may try that.

0:04:45.520 --> 0:04:48.599
<v Speaker 1>I guess it's a possibility, but the legal authority to

0:04:48.680 --> 0:04:53.839
<v Speaker 1>do that would be antitrust, and I don't think Facebook

0:04:53.880 --> 0:04:58.800
<v Speaker 1>would necessarily be the first target for an antitrust breakup order.

0:04:59.320 --> 0:05:01.719
<v Speaker 1>It might be part of a consent decree, but I'm

0:05:01.720 --> 0:05:05.200
<v Speaker 1>not sure what you would break off from Facebook. Because

0:05:05.240 --> 0:05:10.320
<v Speaker 1>the problem with Facebook is the core of data misuse

0:05:10.720 --> 0:05:14.479
<v Speaker 1>comes from its core business, comes from the main social

0:05:14.520 --> 0:05:21.799
<v Speaker 1>media activity, and that's where we're seeing the essentially non

0:05:21.880 --> 0:05:24.760
<v Speaker 1>consensual use of the data. You know, they purport to

0:05:24.839 --> 0:05:30.240
<v Speaker 1>have customers consent because somewhere buried in terms of service,

0:05:30.360 --> 0:05:33.920
<v Speaker 1>there is something there. There are some settings that can

0:05:33.960 --> 0:05:39.920
<v Speaker 1>be adjusted, but the reality is that the privacy policies

0:05:39.960 --> 0:05:43.320
<v Speaker 1>are so ambiguous. There's absolutely no way a well informed

0:05:43.360 --> 0:05:48.960
<v Speaker 1>consumer can really understand how their data is being used

0:05:49.760 --> 0:05:53.360
<v Speaker 1>and have a tool to say no. That just isn't

0:05:53.400 --> 0:05:55.640
<v Speaker 1>there in the marketplace. Right now, let's just talk for

0:05:55.680 --> 0:05:59.359
<v Speaker 1>a moment about FTC chairman Joe Simons, who talked tough

0:05:59.400 --> 0:06:02.520
<v Speaker 1>when he took over the agency. He's been criticized for

0:06:02.600 --> 0:06:05.560
<v Speaker 1>not being tough enough. What's your take on how he's

0:06:05.560 --> 0:06:08.800
<v Speaker 1>been Well, we haven't seen any action coming from the

0:06:08.800 --> 0:06:11.480
<v Speaker 1>FTC yet. I think the jury is still out as

0:06:11.520 --> 0:06:14.600
<v Speaker 1>to what he's going to do if he gives Facebook.

0:06:14.760 --> 0:06:17.920
<v Speaker 1>I mean, I look at the fine that the British

0:06:18.080 --> 0:06:23.200
<v Speaker 1>Information Commissioner there their privacy regulator, issued against Google this week.

0:06:23.400 --> 0:06:27.200
<v Speaker 1>It was about fifty seven million dollars. That's chump change

0:06:27.240 --> 0:06:30.080
<v Speaker 1>for Google. That's nothing. What would be a big enough

0:06:30.120 --> 0:06:33.120
<v Speaker 1>fine for any of these companies? I think for a

0:06:33.160 --> 0:06:36.880
<v Speaker 1>company like Facebook or another one where their revenue is

0:06:37.360 --> 0:06:40.960
<v Speaker 1>in the forty fifty billion dollar range, you need to

0:06:41.000 --> 0:06:43.880
<v Speaker 1>find over a hundred million dollars for it to actually

0:06:44.360 --> 0:06:47.839
<v Speaker 1>make a difference. Well, we shall see if that happens,

0:06:48.080 --> 0:06:51.040
<v Speaker 1>because I think twenty two and a half million dollars

0:06:51.080 --> 0:06:54.359
<v Speaker 1>against Google was the previous record for the FTC. Great

0:06:54.400 --> 0:06:57.360
<v Speaker 1>to have you on again, Joel. That's Joel Ridenberg. He's

0:06:57.360 --> 0:07:00.320
<v Speaker 1>an expert in privacy law and a professor at Wardom

0:07:00.400 --> 0:07:05.320
<v Speaker 1>Law School. Thanks for listening to the Bloomberg Law Podcast.

0:07:05.640 --> 0:07:09.720
<v Speaker 1>You can subscribe and listen to the show on Apple Podcasts, SoundCloud,

0:07:09.800 --> 0:07:13.680
<v Speaker 1>and on Bloomberg dot com slash podcast. I'm June Brosso.

0:07:14.160 --> 0:07:15.440
<v Speaker 1>This is Bloomberg