Cambridge Analytica
A political consultancy obtained data on tens of millions of Facebook users without their consent and sold psychological targeting to election campaigns. The data harvesting is documented and was penalised. Whether the targeting changed any votes is not established.
Why this verdict
Confirmed by UK Information Commissioner enforcement action, a $5 billion FTC penalty against Facebook, and testimony from the company's own former employees; the claim that the targeting actually worked is a separate and weaker one.
- Period
- Region
- Reading time
- Sources
01The claim
That Cambridge Analytica and its parent SCL harvested personal data from up to 87 million Facebook profiles via a personality quiz app, built psychographic models of individual voters, and deployed them for political clients including the 2016 Trump campaign and Brexit-aligned groups.
02Where it came from
In 2014 researcher Aleksandr Kogan built a Facebook app, thisisyourdigitallife, which paid a few hundred thousand users to take a personality quiz. Facebook's platform terms at the time allowed an app to collect data not only about the user but about their friends. Roughly 270,000 participants therefore yielded tens of millions of profiles. Kogan passed the data to Cambridge Analytica, in breach of Facebook's developer terms, which prohibited transfer to third parties.
03What the record shows
✓ CONFIRMED — It happened. The documents exist.
Facebook learned of the transfer in 2015 and asked the parties to delete the data, accepting written certifications that they had. In March 2018 Christopher Wylie, a former Cambridge Analytica employee, went on the record with the Observer and the New York Times with documents and internal emails showing the data had been retained and used. Undercover footage broadcast by Channel 4 News recorded chief executive Alexander Nix describing entrapment and disinformation tactics the firm could offer clients.
Regulators substantiated the core facts. The UK Information Commissioner's Office fined Facebook the statutory maximum then available, £500,000, and pursued SCL Elections, which entered administration; the ICO's 2020 final report to Parliament confirmed the data flows. The US Federal Trade Commission imposed a $5 billion penalty on Facebook in 2019 for privacy misrepresentations. The Securities and Exchange Commission separately fined the company $100 million for misleading investors about the risk.
The ICO's report also reached a deflationary conclusion the headlines rarely carry: it found the psychographic models to be far less sophisticated than the company's sales pitch claimed, and found no evidence of the promised capability being effectively deployed on UK referendum data. The confirmed conspiracy is the data theft. The mind-control product was substantially marketing.
04What it cost
The scandal drove the Cambridge Analytica group into insolvency, produced the largest privacy penalty in US history, accelerated GDPR enforcement culture in Europe, and closed off the friend-data permissions that made the harvest possible. It also created a durable and somewhat misleading public belief that elections are decided by algorithmic persuasion — a belief that outruns the evidence and that, ironically, was manufactured by the company's own promotional claims.