Federal regulators investigating Facebook for mishandling its users’ personal information have set their sights on the company’s CEO, Mark Zuckerberg, exploring his past statements on privacy and weighing whether to seek new, heightened oversight of his leadership.
The discussions about how to hold Zuckerberg accountable for Facebook’s data lapses have come in the context of wide-ranging talks between the Federal Trade Commission (FTC) and Facebook that could settle the government’s more than year-old probe, according to two people familiar with the discussions. Both requested anonymity because the FTC’s inquiry is confidential under law.
I hope you understand, this is not how I meant for things to go, and I apologise for any harm done as a result of my neglect.
Such a move could create new legal, political and public-relations headaches for one of Silicon Valley’s best known — and image conscious — corporate leaders. Zuckerberg is Facebook’s co-founder, chief executive, board chairman and most powerful stock owner, and a sanction from the federal government would be seen as a rare rebuke to him and the tech giant’s historic “move fast and break things” ethos.
Often, the FTC does not target executives in cases in which it finds a company’s business practises have violated web users’ privacy. But critics said targeting Zuckerberg could show other tech giants that the agency is willing to hold top executives directly accountable for their firms’ repeated data misdeeds.
“The days of pretending this is an innocent platform are over, and citing Mark in a large-scale enforcement action would drive that home in spades,” said Roger McNamee, an early investor in the company and one of Zuckerberg’s critics.
In past investigations of Facebook, the United States government opted to spare Zuckerberg from the most onerous scrutiny. Documents obtained from the FTC under federal open-records rules reflect that the agency considered, then backed down from, putting Zuckerberg directly under order during its last settlement with Facebook in 2011. Had it done so, Zuckerberg could have faced fines for future privacy violations.
[FTC] should hold individual executives accountable for order violations in which they participated, even if these individuals were not named in the original orders.
Asked about the negotiations, Facebook said in a statement that it “hope(s) to reach an appropriate and fair resolution”. The FTC declined to comment for this story.
The FTC began investigating Facebook in March 2018, amid reports that Cambridge Analytica, a political consultancy, improperly accessed data on roughly 87 million of the social networking site’s users. The federal probe has focused on whether Facebook violated an agreement, brokered with the FTC in 2011, that required the company to improve its privacy practises. Since then, Facebook has acknowledged a series of additional privacy lapses, including an admission Thursday that it mishandled millions of users’ passwords on Instagram, its photo-sharing service.
Appearing before US Congress last year, Zuckerberg sought to take personal responsibility for a range of his company’s recent missteps, including Facebook’s entanglement with Cambridge Analytica. “I started Facebook, I run it and I’m responsible for what happens here,” he told lawmakers. But the Facebook chief still maintained that the company did not commit a “violation of the consent decree” it had struck with the FTC.
Settling that federal inquiry, now more than a year old, could force Facebook to make significant concessions, including paying a fine ranging into the billions of dollars, The Washington Post has reported. It could lead to new obligations targeting Zuckerberg, too. One idea that has been raised could require him or other executives to certify the company’s privacy practices periodically to the board of directors, two people familiar with the matter said, along with heightened oversight by the FTC.
It is unclear whether the FTC and Facebook are still contemplating such a requirement, or whether they’ve struck an agreement on these or other outstanding matters. But Facebook has fought fiercely to shield Zuckerberg as part of the negotiations, one of the sources familiar with the probe said. Either Facebook or the FTC could choose to walk away from talks, resulting in the matter heading to court.
The idea of holding Zuckerberg accountable — and even subjecting him to penalties for Facebook’s alleged mishandling of users’ data — has gained political traction in Washington. On Thursday, Senator Richard Blumenthal (Democrat, from Connecticut) said the company’s top executive “wasn’t just aware of Facebook’s invasion of consumer privacy, he signed off on it and publicly downplayed legitimate concerns.”
“Holding Mark Zuckerberg and other top Facebook executives personally at fault and liable for further wrongdoing would send a powerful message to business leaders across the country: You will pay a hefty price for skirting the law and deceiving consumers,” Blumenthal said.
Some of the FTC’s own decision-makers also have aired their support for penalties against executives when their companies are under investigation. In a May 2018 memo, Democratic Commissioner Rohit Chopra said the agency “should hold individual executives accountable for order violations in which they participated, even if these individuals were not named in the original orders”. He didn’t mention Facebook by name, and he did not respond to requests for comment.
