Facebook failed to protect user data – fined £500k

On 30 October 2019, the Information Commissioner’s Office (ICO) issued a statement saying that Facebook and the ICO have settled their dispute over Facebook’s failure to protect app users’ personal data, some of which Cambridge Analytica (CA) used for micro-targeting of political adverts during the EU Referendum.

As part of the agreement, Facebook agreed to pay a £500,000 fine levied under the Data Protection Act 1998 but did not admit liability and was allowed to retain documents disclosed by the ICO during the appeal, for the purposes of its own internal investigations.