Connect with us


Facebook’s secret settlement on Cambridge Analytica gags UK data watchdog



Remember the app audit Facebook founder Mark Zuckerberg promised to carry out a little under three years ago at the height of the Cambridge Analytica scandal? Actually the tech giant is very keen that you don’t.

The UK’s information commissioner just told a parliamentary subcommittee on online harms and disinformation that a secret arrangement between her office and Facebook prevents her from publicly answering whether or not Facebook contacted the ICO about completing a much-trumpeted ‘app audit’.

“I think I could answer that question with you and the committee in private,” information commissioner Elizabeth Denham told questioner, Kevin Brennan, MP.

Pressed on responding, then and there, on the question of whether Facebook ever notified the regulator about completing the app audit — with Brennan pointing out “after all it was a commitment Mark Zuckerberg gave in the public domain before a US Senate committee” — Denham referred directly to a private arrangement with Facebook which she suggested prevented her from discussing such details in public.

“It’s part of an agreement that we struck with Facebook,” she told the committee. “In terms of our litigation against Facebook. So there is an agreement that’s not in the public domain and that’s why I would prefer to discuss this in private.”

In October 2019 Facebook settled with the UK’s data protection watchdog — agreeing to pay in full a £500,000 penalty announced by the ICO in 2018 in relation to the Cambridge Analytica breach but which Facebook had been appealing.

When it settled with the ICO Facebook did not admit liability. It had earlier secured a win, from a first-tier legal tribunal that had held June that “procedural fairness and allegations of bias” against the regulator should be considered as part of its appeal, so its litigation against Facebook had got off to a bad start — likely providing the impetus for the ICO to settle with Facebook’s private army of in-house lawyers.

In a statement at the time, covering the bare bones of the settlement, the ICO said Denham considered the agreement “best serves the interests of all UK data subjects who are Facebook users”.

There was no mention of any ‘gagging clauses’ in that disclosure. But the regulator did note that the terms of the agreement gave Facebook permission to “retain documents disclosed by the ICO during the appeal for other purposes, including furthering its own investigation into issues around Cambridge Analytica”.

So — at a stroke — Facebook gained control of a whole lot of strategically important information.

The settlement looks to have been extremely convenient for Facebook. Not only was it fantastically cheap (Facebook paid $5BN to settle with the FTC in the wake of the Cambridge Analytica scandal just a short while later); and not only did it provide Facebook with a trove of ICO-obtained data to do its own digging into Cambridge Analytica safely out of the public eye; but it also ensured the UK regulator would be restricted in what it could say publicly.

To the point where the information commissioner has refused to say anything about Facebook’s post-Cambridge Analytica app audit in public.

The ICO seized a massive trove of data from the disgraced (and since defunct) company which had become such a thorn in Facebook’s side, after raidingCambridge Analytica’s UK offices in early 2018. How much of that data ended up with Facebook via the ICO settlement is unclear.

Interestingly, the ICO also never produced a final report on its Cambridge Analytica investigation.

Instead it sent a letter to the DCMS committee last year — in which it set out a number of conclusions, confirming its view that the umbrella of companies of which CA was a part had been aggregating datasets from commercial sources to try to “make predictions on personal data for political alliance purposes”, as it put it; also confirming the improperly obtained Facebook data had been incorporated into a pre-existing database containing “voter file, demographic and consumer data for US individuals”.

The ICO also said then that its investigation did not find evidence of the Facebook data that had been sold to Cambridge Analytica had been used for political campaigning associated with the UK’s Brexit Referendum. But there was no overarching report detailing the underlying workings via which the regulator got to its conclusions.

So, again from Facebook’s perspective, a pretty convenient outcome.

Asked today by the DCMS committee why the regulator had not produced the expected final report on Cambridge Analytica, Denham pointed to a number of other reports it put out over the course of the multi-year probe, such as audits of UK political parties and an investigation into credit reporting agencies.

“The letter was extensive,” she also argued. “My office produced three reports on the investigation into the misuse of data in political campaigning. So we had a policy report and we had two enforcement reports. So we had looked at the entire ecosystem of data sharing and campaigning… and the strands of that investigation are reported out sufficiently, in my view, in all of our work.”

“Taken together the letter, which was our final line on the report, with the policy and the enforcement actions, prosecutions, fines, stop processing orders, we had done a lot of work in this space — and what’s important here is that we have really pulled back the curtain on the use of data in democracy which has been taken up by… many organizations and parliamentarians around the world,” she added.

Denham also confirmed to the committee that the ICO has retained data related to the Cambridge Analytica investigation — which could be of potential use to other investigations still ongoing around the world. But she denied that her office had been asked by the US Senate Intelligence Committee to provide it with information obtained from Cambridge Analytica — seemingly contradicting an earlier report by the US committee that suggested it had been unable to obtain sought for information. (We’ve contacted the committee to ask about this.)

Denham did say evidence obtained from Cambridge Analytica was shared with the FTC, SEC and with states attorneys general, though.

We’ve also reached out to Facebook about its private arrangement with the ICO, and to ask again about the status of its post-Cambridge Analytica ‘app audit’. (And will update this report with any response.)

The company has produced periodic updates about the audit’s progress, saying in May 2018 that around 200 apps had been suspended as a result of the internal probe, for example.

Then in August 2019 Facebook also claimed to the DCMS committee that the app audit was “ongoing”.

In its original audit pledge — in March 2018 — Zuckerberg promised a root and branch investigation into any other ‘sketchy’ apps operating on Facebook’s platform, responding in a ‘crisis’ length Facebook post to the revelations that a third party had illicitly obtained data on millions of users with the aim of building psychographic profiles for voter targeting. It later turned out that an app developer, operating freely on Facebook’s platform under existing developer policies, had sold user data to Cambridge Analytica.

“We will investigate all apps that had access to large amounts of information before we changed our platform to dramatically reduce data access in 2014, and we will conduct a full audit of any app with suspicious activity,” Zuckerberg wrote at the time. “We will ban any developer from our platform that does not agree to a thorough audit. And if we find developers that misused personally identifiable information, we will ban them and tell everyone affected by those apps. That includes people whose data [Aleksandr] Kogan misused here as well.”

It’s notable that the Facebook founder did not promise to transparently and publicly report audit findings. This is of course what ‘self regulation’ looks like. Invisible final ‘audit’ reports.

An ‘audit’ that’s entirely controlled by an entity deeply implicated in core elements of what’s being scrutinized obviously isn’t worth the paper it’s (not) written on. But, in Facebook’s case, this opened-but-never-closed ‘app audit’ appears to have served its crisis PR purpose.

Continue Reading


Bitski raises $19 million from a16z to become the ‘Shopify for NFTs’



For every crypto-skeptic that see NFTs as yet another hype bubble, there’s an acolyte who sees NFTs as the key to unlocking the future of the creative web.

Bitski, an SF-based startup that builds custom NFT storefronts for brands and creators, is banking on the latter and they have new investors betting the same. The startup tells TechCrunch they’ve raised $19 million in a Series A led by Andreessen Horowitz. The firm joins a host of creators and celebrities including Jay Z, MrBeast, Serena Willliams and 3LAU in backing the startup.

The NFT space has gotten awfully crowded lately, riding a wave of investor hype and billions of dollars worth of transactions in the past several months. While the high-dollar artwork sold by artists like Beeple and exclusive crypto communities like CryptoPunks have been hotbeds of activity, founders like those behind Bitski believe that these blockchain-backed digital goods are going to inspire a massive transformation in how artists, influencers and brands monetize their online popularity.

Bitski is aiming to allow mainstream brands and celebrities to bypass the crypto complexity of early marketplaces, hoping to give customers like early partner Adidas an on-ramp to the NFT world that’s more approachable to consumers who understand digital items but might not have fully bought into crypto. The startup sells creators a variety of subscription plans to power custom NFT storefronts that they can sell through as their own channel rather than pushing users to wide-ranging marketplaces. 

There are plenty of arguments among builders and users of NFT platforms surrounding which elements of a service should be blockchain-based and which should default to more time-honed e-commerce flows. Bitski often errs on the side of user familiarity, allowing credit card purchases on the platform, “forgot your password” functionality and user wallets hosted on Bitski’s own server hardware. They’re controversial onboarding choices that won’t satisfy crypto purists and decentralization advocates but will likely help new users get acquainted with NFTs quickly.

With the company’s Series A closed, Bitski has raised some $23.4 million to date.

Continue Reading


Figure raises $7.5M to help startup employees better understand their compensation



The topic of compensation has historically been a delicate one that has left many people — especially startup employees — wondering just what drives what can feel like random decisions around pay and equity.

Last June, software engineers (and housemates) Miles Hobby and Geoffrey Tisserand set about trying to solve the problem for companies by developing a data-driven platform that aims to help companies structure their compensation plans and transparently communicate them to candidates.

Now today, the startup behind that platform, Figure, announced it has raised $7.5 million in seed funding led by CRV. Bling Capital, Better Tomorrow Ventures and Garage Capital also participated in the financing, along with angel investors such as AngelList co-founder Naval Ravikant, Jason Calacanis, Reddit CEO Steve Huffman and other executives based in Silicon Valley.

The startup has amassed a client list that includes other startups such as fintechs Brex and NerdWallet and AI-powered fitness company Tempo. 

Put simply, Hobby and Tisserand’s mission is to improve workflows and transparency around pay, particularly equity. The pair had both worked at startups themselves (Uber and Instacart, respectively) and ended up leaving money on the table when they left those companies because no one had properly explained to them what their equity, which changed at every valuation, meant.  

Figure co-founders and co-CEOs Miles Hobby and Geoffrey Tisserand. Image Credits: Figure

So, one of their goals was to create a solution that would provide a user-friendly explanation of what a person’s equity stake really means, from tax implications to whether or not they have to buy the stock and/or hold onto it.

“I’ve gone through the job search process many times before and there’s all these complex legal documents to understand why you’re getting 10,000 stock options, but obviously we knew the vast majority of people have no idea how that works,” Tisserand told TechCrunch. “We saw an opportunity there to help companies actually convey the value to their candidates while also making them aware of the potential risks of owning something that’s so illiquid.”

Image Credits: Figure

Another goal of Figure’s is to help create a more fair and balanced process about decisions around pay and equity so that there’s less inequality out there. Pointedly, it aims to remove some of the biases that exist around those decisions by systematizing the process.

“We saw a void in this kind of context around equity…and knew that there had to be a better way for companies to structure, manage and explain their compensation plans,” Hobby said.

To Hobby and Tisserand, Figure is designed to help stop instances of implicit bias.

“Compensation should be based on the work that you’re doing, and not gender or ethnic background,” Tisserand told TechCrunch. “We’re trying to give that context and remove biases. So, we’re trying to help at two different stages –– to surface inequities that already exist and make sure there are no anomalies, and then to help stop them before they can exist.”

Figure also aims to give companies the tools to educate candidates and employees on their total compensation — including equity, salary, benefits and bonuses — in a “straightforward and user-friendly” way. For example, it can create custom offer letters that interactively detail a candidate’s compensation.

“Our goal is for Figure to become an operating system for compensation, where a company can encode their compensation philosophy into our system, and we help them determine their job architecture, compensation bands and offer numbers while monitoring their compensation health to provide adjustment suggestions when needed,” Hobby said.

Post-hire, Figure’s compensation management system “helps keep everything running smoothly.”

Anna Khan, general partner of enterprise software at CRV, is joining Figure’s board as part of the funding. The decision to back the startup was in part personal, she said.

“I’d been investing in software for eight years and was alarmed that no one was building anything around pay equity when it comes to how we’re paid, why we’re paid what we’re paid and on how to build equity long term,” Khan told TechCrunch. “Unfortunately, discussions around compensation and equity still happen behind closed doors and this extends into workflow around compensation — equally broken — with manual leveling, old data and large pay inequities.”

The company plans to use its new capital to expand its product offerings and scale its organization.

Continue Reading


Diginex launches ESG reporting platform aimed at small businesses



As ESG reporting goes up the agenda for large companies, it’s also increasingly doing so for smaller companies as well. But right now, tracking things like your company’s CO2 emissions is mainly the preserve of large corporations. Now a startup hopes to address this.

Diginex Solutions has a self-guided tool which claims to generate ESG reports six times faster than competitors and comes in at a relatively affordable $99 per month.

The blockchain-enabled reporting tool also generates reports, giving companies the ability to demonstrate their ESG creds.

DiginexESG is certified by the GRI, an international independent standards organization and now operates in the US, UK, Luxembourg, Hong Kong, Singapore, and Chile. It is currently raising venture backing largely from strategic corporate investors.

Competitors include Turnkey Group, NASDAQ Onereport, Enablon (raised $15M) and World-favour.

Mark Blick, CEO at Diginex Solutions said, “The current landscape of ESG reporting is challenging for many organizations – particularly SMEs – requiring huge consultancy fees, time and resources that distracts from day-to-day activity. The DiginexESG platform quite simply takes away those challenges and does all the heavy lifting for them. It’s like Docusign, Dropbox, TurboTax or Slack hardcoded for ESG reporting.”

Continue Reading