Disinformation And ‘Fake News': Data Implications Of The Select Committee Report

The revelations surrounding Cambridge Analytica's use of personal data and involvement with the Vote Leave campaign raised serious questions about the use of personal data in the EU referendum campaign and more widely by technology companies in general.

The subsequent investigation by the Digital, Culture, Media and Sport Select Committee (the "DCMS Select Committee") has drawn attention to the activities of technology companies and the widespread use of digital personal data in political campaigning. It has been the catalyst for multiple investigations into a range of issues, including the extent to which electoral law is fit for purpose, the use of data analytics in political campaigns and policy recommendations concerning personal information and political influence.

The DCMS Select Committee published its final report (the "Report") on 18 February 2019 (available here).

Concurrent investigations

Alongside the DCMS Select Committee's investigation into disinformation and "fake news", the UK data protection regulator (the "ICO") is also conducting a formal investigation into the use of data analytics in political campaigns and published a summary report of that investigation in November 2018.

Report conclusions and recommendations

The Report contains a number of conclusions and recommendations. In particular, from a data perspective:

Data use and data targeting: The Report specifically criticises the data practices of Facebook and calls for the ICO to carry out a detailed investigation into the practices of the Facebook platform, its use of users' and users' friends' data, and the use of 'reciprocity' of the sharing of data. Data and competition convergence: The Report also calls for the UK Competition and Markets Authority to conduct a comprehensive audit of the advertising market on social media and investigate whether Facebook has been involved in anti-competitive practices. This appears to align at least conceptually with the recent German competition authority investigation into Facebook, details of which are available in our blog post here. AggregateIQ: The Report refers to insecure data found on the AggregateIQ website and the analysis of data stored in a vast repository as evidence that AggregateIQ collected, stored and shared data belonging to UK citizens in the context of its work on the EU referendum. Again, this aligns with the ICO's own investigation, as a result of which the ICO has issued its first extra-territorial...