Tool to help Facebook users check if data was compromised

Facebook chief executive officer Mark Zuckerberg testifies during a US House Committee on Energy and Commerce hearing about Facebook, on Capitol Hill in Washington, DC, on April 11, 2018. PHOTO | SAUL LOEB | AFP

What you need to know:

  • Many Kenyans were appalled that their social media data can be used and shared with a third party without consent.
  • The government has been discussing the Data Protection Bill since 2013 and its current status is not clear.

Facebook users in Kenya can now know whether they are among millions in the world whose personal information may have been compromised by British consultancy firm Cambridge Analytica.

The social networking company has put up a tool to help users find out by checking on its online Help Centre or having an alert posted on the news feed.

The company, whose founder and chief executive officer Mark Zuckerberg appeared before the US Congress to answer questions about data handling and privacy, has advised those with accounts to look for the “Was my information shared” section and it will tell you whether you or any of your friends used the now banned Facebook personality quiz app called This is your Digital Life.

UHURU ELECTION
In addition, Facebook said all 2.2 billion users will receive a notice titled “Protecting your Information” with a link to see what apps they use and what information they have shared with those apps.

Information gathered from those who logged into that application was passed to Cambridge Analytica that was linked to President Uhuru Kenyatta’s election campaigns in 2013 and 2017.

The smear campaign against Mr Kenyatta’s main political rival, Mr Raila Odinga, which featured apocalyptic scenes, had one message:

“Stop Raila Save Kenya…….The Future of Kenya is in Your Hands.”

But Mr Kenyatta’s party, Jubilee, has denied working with the firm in its campaigns in both elections.

PROFILE
Once they check if their personal data was used, users will get alerts such as “As a result, it doesn’t appear your Facebook information was shared by Cambridge Analytica by This is your Digital Life”.

Some users also posted this feedback from the site, “based on our investigation, you don’t appear to have logged into the app before it was removed in 2015-however, a friend of yours did log in”, which went on to say that information from their public profile, in addition to their page “likes”, their birthday and current city were likely shared with This is your Digital Life app.

While levels of online political engagement in Kenya have yet to rival those observed in the West, the digital space is increasingly becoming an important area in local politics.

PRIVACY
And although the ongoing investigation involves a cast which is mainly American and British, it has brought to the fore Kenya’s need for better laws on data privacy and protection.

Many Kenyans were appalled that their social media data can be used and shared with a third party without consent.

During the Senate questioning, Mr Zuckerberg was asked by Senator Roger Wicker whether or not the company can track users even when they have logged out of the service.

“There have been reports that Facebook can track a user’s Internet browsing activity even after that user has logged off of the Facebook platform,” Mr Wicker said. “Can you confirm whether or not this is true?”

TRACKING
Mr Zuckerberg responded: “Senator, I want to make sure I get this accurately so it would probably be better to have my team follow up afterwards.

"We do that for a number of reasons, including security and including measuring ads to make sure that the ad experiences are the most effective.”

This admission could mean that third party apps could be gathering private information from Facebook and using it for strategic messaging – including for political campaigns – even when they are offline.

But are there laws Kenyans can use to seek recourse if the worst happens?

The government has been discussing the Data Protection Bill since 2013 and its current status is not clear.

Its aim, it states, is “to regulate the collection, retrieval, processing, storage, use and disclosure of personal data”.

CYBERCRIME
It also defines “personal data” as information relating to the race, gender, sex, pregnancy, marital status, national, ethnic or social origin, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language and birth of the individual.

In June last year, National Assembly Majority Leader Aden Duale introduced the 2017 Computer and Cybercrimes Bill that is still in the National Assembly.

Section 12 of this Bill criminalises false publications and fake news.

Cyberbullying is also provided for under the proposed law.

Cyber espionage is also criminalised. But these laws face challenges including new technology update, jurisdictional issues and enforcement such as in the case of Cambridge Analytica.