The document summarizes a presentation given by Dan Harvey about Facebook and Cambridge Analytica. It discusses how Cambridge Analytica obtained data on 87 million Facebook users through a personality quiz app. This data was then used by political groups to micro-target voters. The presentation criticizes Facebook's business model of surveillance capitalism and their use of "dark patterns" in user interfaces to discourage privacy controls. It argues they must be more transparent about data collection and give users more control over their data and privacy settings.

1. W H E N C A M B R I D G E A N A LY T I C A M E T
FAC E B O O K : A S TO R Y O F DA R K U X
A N D S H I T T Y B U S I N E S S M O D E L S
U X PA
@ DA N C H A R V E Y # DA R K U X
Thanks for the introduction. A few things before I start:
1. I’m head of product design & brand at The Dots. We’re a London-based startup that Forbes has called a “LinkedIn for Creatives.” So if you’re want to connect with
other designers or find your dream job then please check us out at the-dots.com.
2. I lived in New York for 20 years. So I hope you give zero fucks that I’m probably going to say fuck a fucking lot. Cool? Alright.
3. I promise even if you’re deeply up-to-date on all this stuff you were learn something new today on slide 6. Ready? Let’s go!

2. @ DA N C H A R V E Y # DA R K U X
So I don’t know about you but I felt the full range of human emotions when this scandal came to light back in March. We have the tireless efforts of journalists at The
Guardian, Channel 4 News, and The New York Times to thank for the info we have now. But before we talk about the what and the how I want to talk about the who.

3. T H E S E T W O F U C K S
@ DA N C H A R V E Y # DA R K U X
We have Mark Zuckerberg, a tech bro who famously got inspired by “hot or not” in his college dorm room to make Facebook. It should come as a surprise to no one
that he doesn’t understand the concept of “consent.” And Sheryl Sandberg who’s job was to monetise Facebook and generally be the “adult in the room.” Until these
two come up with a more disruptive business model than “Senator, We sell ads” there will be no fundamental or financial incentive for change.

4. T H I S F U C K I N G N U T
@ DA N C H A R V E Y # DA R K U X
We also have Aleksandr Kogan then Aleksandr Spectre then back to Aleksandr Kogan a data scientist (still) at Cambridge University, who developed a quiz app in 2013
called thisisyourdigitallife to be deployed on Facebook. Kogan handed the app over to…

5. & T H I S S M A R M Y
M OT H E R F U C K E R
@ DA N C H A R V E Y # DA R K U X
This smarmy motherfucker is Andrew Nix, the now-ex-ceo of Cambridge Analytica. CA helped snooker 270,000 people on FB to take Kogan’s quiz for “academic
research purposes only.” Two years later in 2015 FB discovered that Kogan had shared data with CA. FB asked CA to delete the data, took their word for it, and in a
SHOCKING PLOT TWIST THEY DIDN’T. What’s more that data is now free game on the wilds of the Internet.

6. W I T H A B O O G L E O F
R A B I D S H I T W E A S E L S
@ DA N C H A R V E Y # DA R K U X
CA is an affiliated corporation with Aggregate IQ and other firms connected to SCL (Strategic Communications Laboratories). Within that web there are easy connections
to make to scum like Trump, Farage, Bannon, Mercer, etc. who used the data in both the 2016 US Presidential race and the Brexit referendum. #ScumAttractsScum
If you were keeping count this is slide 6. Did you know a boogle was what a group of weasels were called? I had no idea. I had to look it up special for this talk.

7. 8 7 , 0 0 0 , 0 0 0
@ DA N C H A R V E Y # DA R K U X@ DA N C H A R V E Y # DA R K U XS O U R C E : FAC E B O O K
It would be bad enough if only 270,000 were lied to by CA and their faux informed consent but because Facebook’s darkUX-friendly settings at the time meant apps
could not only read your info but your friends info as well the number of effected people ballooned to 87 million people. Think about that number for a moment…

8. 8 2 , 2 9 3 , 4 5 7 !
6 6 , 5 7 3 , 5 0 4 "
6 5 , 2 3 3 , 2 7 1 #
@ DA N C H A R V E Y # DA R K U XS O U R C E : W I K I P E D I A
87 MILLION IS MORE THAN THE POPULATION OF:
GERMANY
UK
FRANCE

9. 5 3 , 8 5 5 , 7 3 5 $
@ DA N C H A R V E Y # DA R K U XS O U R C E : W I K I P E D I A
AND IT’S MORE THAN THE POPULATION OF MYANMAR WHERE CONTENT ON FB HAS BEEN LINKED BY THE U.N. TO GENOCIDE OF THE ROHINGYA
POPULATION IN THE COUNTRY.

10. @ DA N C H A R V E Y # DA R K U X
Deep breath. Whew. Let’s not go there. Stay focused.
And guess what? that number is even higher since CA execs have cited more quizzes like “sex compass” were also used to mine data.
Anyway more numbers. Who doesn’t love numbers?

11. 2 9 , 0 0 0
@ DA N C H A R V E Y # DA R K U X@ DA N C H A R V E Y # DA R K U XS O U R C E : FAC E B O O K
Facebook has 29,000 data points on it’s users. That includes…

12. N A M E , FAC I A L R E CO G N I T I O N DATA ,
G E N D E R , E M A I L , P H O N E , B I R T H DAY,
E D U C AT I O N , W O R K , E V E N T S ,
H O M E TO W N , L A N G U AG E , LO C AT I O N ,
I P A D D R E S S E S , L I K E S , C H E C K - I N S ,
C R E D I T C A R D S , FA M I LY, F R I E N D S ,
D E L E T E D F R I E N D S , P H OTO M E TA DATA ,
T I M E L I N E , M E S S AG E S , D E AC T I VAT E
T I M E S , A D S , S E X U A L O R I E N TAT I O N ,
P O L I T I C A L V I E W S , R E L I G I O U S V I E W S ,
& E V E N F U C K I N G P O K E S
@ DA N C H A R V E Y # DA R K U X@ DA N C H A R V E Y # DA R K U XS O U R C E : FAC E B O O K
Some of this data you can remove, some of it you can’t. Some of it makes sense from a security POV, some of it doesn’t. Never ever let a company trick you into
believing there’s some sort of false dichotomy between privacy and security or privacy and convenience. These things don’t have to be mutually exclusive. And they
only are when your business model is corporate surveillance.
The most salient thing that came from Zuck’s Congressional hearings was during his exchange with Congressman Ben Luján (D-NM). During that Zuck confirmed that
FB even has 1,500 data points on people that aren’t on the platform! These so-called “shadow profiles” lead to a particularly dash cunning bit of darkUX… if you’re one
of those people and you want to find out the info they have you on… YOU HAVE TO MAKE AN ACCOUNT AND SIGN-IN to get it.

13. 1. T H E R I G H T TO B E I N F O R M E D
2. T H E R I G H T O F ACC E S S
3. T H E R I G H T TO R E C T I F I C AT I O N
4. T H E R I G H T TO E R A S U R E
5. T H E R I G H T TO R E S T R I C T P R O C E S S I N G
6. T H E R I G H T TO DATA P O R TA B I L I T Y
7. T H E R I G H T TO O B J E C T
8. R I G H T S I N R E L AT I O N TO A U TO M AT E D
D E C I S I O N M A K I N G A N D P R O F I L I N G
@ DA N C H A R V E Y # DA R K U X
R I G H T S U N D E R G D P R
@ DA N C H A R V E Y # DA R K U X
FB can’t be trusted to self-regulate itself. Fortunately we have GDPR coming to save us on the 25th of May. Can I get an amen? How about a hallelujah?
These are just some of the principles enshrined in the EU’s privacy law. This is the closest thing we’ll have to an “Internet Bill of Rights” we have.
Facebook shared their GDPR designs with journalists the other day. The following screens are via Josh Constine of TechCrunch in a blistering article called “A flaw-by-
flaw guide to Facebook’s GDPR privacy changes.”

14. @ DA N C H A R V E Y # DA R K U X
S E N S I T I V E I N F O
@ DA N C H A R V E Y # DA R K U XS O U R C E : T E C H C R U N C H
First up is control of your sensitive profile information, specifically your sexual preference, religious views, and political views. As you’ll see at each step, you can hit
the pretty blue “Accept And Continue” button regardless of whether you’ve scrolled through the information. If you hit the ugly grey “Manage Settings” button, you have
to go through an interstitial where Facebook makes it’s argument trying to deter you from removing the info before letting you make and save your choice. It feels
obviously designed to get users to breeze through it by offering no resistance to continue, but friction if you want to make changes.

15. @ DA N C H A R V E Y # DA R K U X
FAC I A L R E CO G N I T I O N
@ DA N C H A R V E Y # DA R K U XS O U R C E : T E C H C R U N C H
Facebook is bringing facial recognition back to Europe and Canada. The Irish Data Protection commissioner who oversees the EU banned it there in 2012. Users in these
countries will get a chance to turn it on, which is the default if they speed through. It’s a useful feature that can make sure people know about the photos of them floating
around. But here the lack of granularity is concerning. Users might want to see warnings about possible impersonators using their face in their profile pics, but
not be suggested as someone to tag in their friends’ photos. Unfortunately, it’s all or nothing. While Facebook is right to make it simple to turn on or off completely,
granular controls that unfold for those that want them would be much more empowering.

16. @ DA N C H A R V E Y # DA R K U X
DATA CO L L E C T I O N
@ DA N C H A R V E Y # DA R K U XS O U R C E : T E C H C R U N C H
A major concern that’s arisen in the wake of Zuckerberg’s testimonies is how Facebook uses data collected about you from around the web to target users with ads and
optimize its service. While Sherman echoed Zuckerberg in saying that users tell the company they prefer relevant ads, and that this data can help thwart hackers and
scrapers, many users are unsettled by the offsite collection practices. Here, Facebook lets you block it from targeting you with ads based on data about your browsing
behavior on sites that show its Like and share buttons, conversion Pixel, or Audience Network ads. The issue is that there’s no way to stop Facebook from using
that data from personalizing your News Feed or optimizing other parts of its service.

17. @ DA N C H A R V E Y # DA R K U X
N E W T E R M S O F S E R V I C E
@ DA N C H A R V E Y # DA R K U XS O U R C E : T E C H C R U N C H
Facebook recently rewrote its Terms Of Service and Data Use Policy to be more explicit and easy to read. It didn’t make any significant changes other than noting the
policy now applies to its subsidiaries like Instagram and Messenger. That’s all clearly explained here, which is nice. But the fact that the button to reject the new Terms
Of Service isn’t even a button, it’s a tiny ‘see your options’ hyperlink shows how badly Facebook wants to avoid you closing your account. It seems obvious that
Facebook is trying to minimize the visibility of the path to account deletion rather than making it an obvious course of action if you don’t agree to its terms.

18. @ DA N C H A R V E Y # DA R K U X
ACCO U N T D E L E T I O N
@ DA N C H A R V E Y # DA R K U XS O U R C E : T E C H C R U N C H
This is what you get if you click the tiny “see my options” link. First, Facebook doesn’t mention its temporary deactivation option, just the scary permanent delete option.
Facebook recommends downloading your data before deleting your account (which you should). But the fact that you’ll have to wait (often a few hours) before you can
download your data could push users to delay deletion and perhaps never resume. And only if you keep scrolling do you get to another tiny “I’m ready to delete my
account” hyperlink instead of a real button.

19. @ DA N C H A R V E Y # DA R K U X
P R I VAC Y S H O R TC U T S
@ DA N C H A R V E Y # DA R K U XS O U R C E : T E C H C R U N C H
To keep all users abreast of their privacy settings, Facebook has redesigned its Privacy Shortcuts in a colorful format that sticks out from the rest of the site. No
complaints here.

20. @ DA N C H A R V E Y # DA R K U X
ACC E S S YO U R I N F O
@ DA N C H A R V E Y # DA R K U XS O U R C E : T E C H C R U N C H
Facebook has completely redesigned its Download Your Information tool after keeping it basically the same for the past 8 years. You can now view your content and
data in different categories without downloading it, which alongside the new privacy shortcuts is perhaps the only unequivocally positive and unproblematic change
amidst today’s announcements.

21. @ DA N C H A R V E Y # DA R K U X
DATA P O R TA B I L I T Y
@ DA N C H A R V E Y # DA R K U XS O U R C E : T E C H C R U N C H
The Download Your Information tool is supposed to let you take your data and go to a different social network. But it only exports your social graph aka your friends
as a dumb text list of names rather than something more interoperable and useful so good luck finding the right John Smith on another app.

22. 1. E X P L A I N W H AT DATA YO U CO L L E C T, W H Y YO U
CO L L E C T I T, A N D H O W I T M A K E S YO U M O N E Y.
2. YO U R D E S I G N S H O U L D E X P L A I N YO U R
A LG O R I T H M S .
3. A L LOW YO U R C U S TO M E R S TO O P T I N TO DATA
CO L L E C T I O N , R AT H E R T H A N O P T I N G O U T O F I T.
4. E X A M I N E A N D CO N S I D E R H O W BA D AC TO R S
CO U L D U S E YO U R S Y S T E M . T H E N P R E V E N T I T,
P R E PA R E F O R I T, A N D B E R E A D Y TO R E AC T I N
R E A L T I M E I F I T H A P P E N S .
5. M E D I A L I T E R AC Y M AT T E R S . I T ’ S T I M E W E
P R I O R I T I Z E D DATA L I T E R AC Y.
@ DA N C H A R V E Y # DA R K U X
D E S I G N F O R T R U S T
@ DA N C H A R V E Y # DA R K U XS O U R C E : @ S H E R Y LC A BA BA
Sheryl Cababa of Artefact Group wrote a great article called “It’s Time To Start Designing For Transparency.” I’d recommend you all read that. As well as Amber Case’s
recent articles on Medium and TechCrunch. #4 Dan Hon, Zuck’s lack of imagination defense, etc.
And if you can’t design for trust…

23. @ DA N C H A R V E Y # DA R K U X@ DA N C H A R V E Y # DA R K U X
Then you can go zuck yourself.

24. T H A N K S !
U X PA
@ DA N C H A R V E Y # DA R K U X