A02 — Cambridge Analytica: 87 million Facebook profiles and the 2016 election

Category: Electoral manipulation / unauthorized data processing / political psychometrics Company/companies: Meta (Facebook), Cambridge Analytica, SCL Group, Global Science Research (GSR) Years: 2013–2018 (CA founded: December 2013; data harvesting: 2014–2015; exposure: March 2018) Status: CA and SCL — bankruptcy (May 2018); Meta settlements paid; precedent for privacy law Card ID: A02

Metadata

Field	Value
Country/region	USA, United Kingdom, globally (impact on 2016 election, Brexit)
Year revealed	March 17, 2018 (Observer, NYT); first signals: December 2015 (Harry Davies, Guardian)
Years of the practice	2014–2015 (harvesting), 2015–2016 (exploitation), 2016–2018 (concealment)
Total fines / settlements	~$5.725 billion (combined)
Currency	USD + GBP + EUR
Legal basis	FTC Act sec. 5, GDPR (for UK), UK DPA 1998, US state law (Texas)
Whistleblower	Christopher Wylie
Investigative journalist	Carole Cadwalladr (The Observer/Guardian)
Number of people affected	Officially: up to 87 million (per Facebook); ICO: approx. 30 million; UK: 1.1 million
Status (as of today)	Concluded — all key settlements paid

TL;DR

The British-American consulting firm Cambridge Analytica (founded in December 2013 in Delaware as a subsidiary of SCL Group, with an investment of roughly $15 million from billionaire Robert Mercer and the operational involvement of Steve Bannon as vice president) built a massive psychometric database in 2014–2015 based on the data of 87 million Facebook user profiles. The data was obtained by University of Cambridge researcher Aleksandr Kogan and his company Global Science Research (GSR), through the “thisisyourdigitallife” quiz app — 270,000 people downloaded the app, completed a personality quiz for small payments via Amazon Mechanical Turk, and Facebook’s Graph API v1.0 allowed the app to pull data from all their friends as well (an average of 300 per person) without the knowledge or consent of those friends. The data was handed to CA in violation of Facebook’s terms of service and used for political targeting on behalf of the Ted Cruz, and later the Donald Trump campaigns in the 2016 presidential election.

The story broke on March 17, 2018 following simultaneous publications by The Observer (Carole Cadwalladr), The New York Times, and Channel 4 News. The whistleblower was Christopher Wylie, former director of research at CA — a 28-year-old Canadian with pink hair, who described himself as “the person who built Steve Bannon’s psychological warfare tool.” He disclosed documents, screenshots of contracts, and recordings. Channel 4 added hidden-camera footage of CA director Alexander Nix, boasting about offering “beautiful Ukrainian women” to political campaigns to compromise opponents.

The fallout: Facebook suspended CA on March 16, 2018; on May 1, 2018, CA and SCL declared bankruptcy; Facebook’s stock fell by 24% (a loss of approximately $134 billion in market capitalization in one week); Mark Zuckerberg testified before the US Congress on April 10–11, 2018 (nearly 10 hours of questioning). Penalties for Facebook: $5 billion from the FTC (2019, the largest FTC fine in history), $100 million from the SEC (2019), $725 million class action settlement (2022), shareholder derivative settlement, terms undisclosed (July 17, 2025; plaintiffs sought $8 billion), $1.4 billion settlement with the State of Texas (2024), 500,000 GBP in the UK (ICO). Alexander Nix and Aleksandr Kogan received 20-year bans on engaging in specified business activities (FTC, December 2019).

Timeline

Fall 2013 — Christopher Wylie meets Steve Bannon for the first time. Shortly thereafter, Wylie and Alexander Nix meet with Robert and Rebekah Mercer in New York.
Late 2013 — Robert Mercer funds a $1.5 million pilot project with SCL Group; psychographic targeting is tested in the Virginia gubernatorial election.
December 31, 2013 — Cambridge Analytica LLC is registered in Delaware.
Spring 2014 — Aleksandr Kogan founds Global Science Research (GSR).
June 4, 2014 — SCL Group signs a contract with GSR for the acquisition of Facebook data. Mercer invests $15 million in the joint venture.
July 2014 — American attorney Laurence Levy warns that CA may be violating election law regarding the involvement of foreign citizens in US elections (Britons Nix, Wylie, and others in the US).
Summer–fall 2014 — the “thisisyourdigitallife” Facebook app harvests data from 270,000 users — they give consent for around $1 via Mechanical Turk, but their 87 million friends, whose data is also pulled, do not.
January 2015 — a second GSR–SCL contract delivers an expanded dataset with personality scores.
April 2015 — Facebook deprecates Graph API v1.0 (Friends API).
December 11, 2015 — Harry Davies at The Guardian publishes the first article: “Ted Cruz using firm that harvested data on millions of unwitting Facebook users.” First public disclosure. Facebook takes no immediate action.
April 2015 – April 2016 — Cambridge Analytica works for the Ted Cruz campaign in the GOP primaries. After Trump’s victory, it moves operations to his campaign.
May 2016 — Trump hires CA; Steve Bannon becomes Trump campaign chief in August 2016.
November 2016 — Trump wins the US presidential election.
June 2016 — Brexit referendum; subsequent reports about CA’s involvement would later be dismissed by the ICO as marginal (“no significant breaches”).
January 20, 2017 — Bannon takes office as White House Chief Strategist.
April 2017 — Bannon divests his CA holdings in accordance with ethics requirements (his shares were valued between $1 and $5 million).
March 2017 — CA begins drawing controversy, but the scandal has yet to break.
September 2017 — Christopher Wylie begins cooperating with The Guardian and Carole Cadwalladr.
October 2017 – February 2018 — journalistic investigation underway; Wylie gathers documents, contracts, emails.
March 16, 2018, evening (US) — Facebook preempts publication and announces the suspension of CA and SCL Group from the platform.
March 17, 2018 — The Observer (Cadwalladr, with Wylie as whistleblower) and The New York Times publish synchronized investigations. UK Information Commissioner Elizabeth Denham issues a statement: “we are investigating the circumstances in which Facebook data may have been illegally acquired and used.”
March 19, 2018 — Channel 4 News publishes the first installment of its hidden-camera investigation at CA. Facebook sends investigators to CA’s offices; the ICO orders them to stand down.
March 20, 2018 — Channel 4 News airs the second installment: Alexander Nix brags about “delivering beautiful Ukrainian women to the homes of competitors.”
March 21, 2018 — Mark Zuckerberg issues his first public statement after 5 days of silence.
March 26, 2018 — the FTC announces the opening of an investigation.
April 10–11, 2018 — Mark Zuckerberg testifies before the US Congress (Senate and House of Representatives); roughly 10 hours of testimony in total.
May 22, 2018 — Zuckerberg testifies before the European Parliament.
May 1, 2018 — CA and SCL Group file for bankruptcy.
October 24, 2018 — the UK ICO issues a Monetary Penalty Notice of 500,000 GBP against Facebook (the maximum under the pre-GDPR UK DPA 1998); Facebook paid after a settlement on October 30, 2019.
July 24, 2019 — the FTC announces a $5 billion penalty against Facebook — the largest in FTC history; a 20-year consent to supervision.
July 24, 2019 — the SEC imposes a $100 million fine for misleading investors.
December 6, 2019 — the FTC enters into administrative consent orders with Alexander Nix and Aleksandr Kogan: 20-year bans on specified activities; mandatory deletion of data and models.
December 2022 — Meta agrees to a $725 million settlement in a class action (In re: Facebook Inc. Consumer Privacy User Profile Litigation, N.D. Cal.).
2022 — the State of Texas sues Meta for violating the state biometric privacy statute (BIPA-like); the case does not directly concern CA but a broader privacy breach.
July 30, 2024 — $1.4 billion settlement in Texas (facial recognition case, but historically tied to Meta’s overall reckoning).
July 17, 2025 — settlement on undisclosed terms in a shareholder derivative suit in the Delaware Court of Chancery against Meta’s board and Zuckerberg personally; the shareholders had originally sought $8 billion in damages (reimbursement of fines and costs after the CA scandal). The parties settled on the second day of trial without disclosing the amount.

Mechanism

How it worked — the technical layer

Graph API v1.0 (2010–2015) allowed an app, once a user granted it access to their data, to also pull data from that user’s friends, provided the friends had the relevant privacy setting turned on (the default was: yes). This was a Facebook design decision, not a bug. Mark Zuckerberg, testifying before Congress, conceded: “Facebook audits tens of thousands of apps” that had similar access.

Aleksandr Kogan built the app “thisisyourdigitallife” — a personality quiz based on the OCEAN psychometric model (Big Five: Openness, Conscientiousness, Extraversion, Agreeableness, Neuroticism). Users recruited through Amazon Mechanical Turk (paid pennies) agreed to participate in what was billed as an “academic study.” Once installed, the app harvested:

User data: public profile, birthday, likes, location
Friends’ data: first and last names, likes, biographies, locations — all without their consent

Kogan reached 270,000 app installations → approximately 87 million associated profiles. He passed the data to CA/SCL Elections, violating Facebook’s terms of service (Kogan had promised Facebook academic use only). The FTC complaint (December 2019) revealed that the app lied to users: the disclosure stated “we will not collect any information that identifies you” — when in reality it collected the Facebook User ID, which is a unique identifier.

The political layer — psychographics and microtargeting

CA claimed to have approximately 5,000 data points on every American adult. The combination of Facebook data with:

public voter databases (names, addresses, voting history)
commercial data brokers (purchases, magazines, subscriptions)
online surveys

allowed, according to CA, for the prediction of OCEAN personality traits and the creation of microtargeted segments. For instance, a segment like “paranoid gun owner in Pennsylvania” would receive different ads than “optimistic mother in Michigan.”

Critical note: after the investigation concluded, the UK’s ICO stated in its report to Parliament (2020) that many of CA’s sales materials and Wylie’s claims were overstated. Internal CA communications pointed to “skepticism about the real accuracy of the processing.” In other words: CA was selling psychographic magic, but its methods were largely conventional data analytics with an aura of mystery. The paradox: this does not make the case less serious — it only means that the actual impact of CA on the 2016 election is difficult to measure, but the privacy violations and breach of Facebook’s terms of service were quite real and affected 87 million people.

Why it was illegal/harmful

Facebook’s terms of service — Kogan declared academic use, handed the data over commercially; CA knew
US Federal Election Campaign Act — suspicions about UK citizens’ involvement in decisions affecting an American campaign (Nix, Wylie, and many at CA were British)
UK Data Protection Act 1998 — the basis for the ICO’s 500,000 GBP fine
FTC Act sec. 5 — Facebook misled consumers about the scope of data protection and was subject to a 2012 Consent Order (Facebook v. FTC), which already obligated it to protect privacy — the CA case was a breach of that order
Texas state law (UCL) — through misleading representations about the protection of state residents’ data

Discovery

Who discovered it and when

Christopher Wylie (whistleblower) — a Canadian born in 1989 in Victoria, British Columbia. Self-taught in data analysis, with no formal IT education — he studied law at the London School of Economics. From 2013 to 2014 he worked as director of research at SCL Elections/CA. It was he — as a 24-year-old — who proposed to Bannon the psychometric targeting model, drawing on the work of Dr. Michal Kosinski at the Cambridge Psychometrics Centre. Kogan was his substitute after Kosinski refused to cooperate. Wylie left CA in 2014 but kept the documentation.

In 2017, having initiated contact with Carole Cadwalladr, Wylie handed over documents, contracts, screenshots, invoices, recordings. In his interview with The Observer on March 17, 2018, he described himself and CA:

“We exploited Facebook to harvest millions of people’s profiles. And built models to exploit what we knew about them and target their inner demons. That was the basis the entire company was built on.”

Harry Davies — GUARDIAN — December 2015 — formally the first journalist to expose the story, more than two years before it broke. His article “Ted Cruz using firm that harvested data on millions of unwitting Facebook users” contained many of the key facts. Facebook received press inquiries, opened an internal “investigation,” but took no public action. Only in March 2019 did Facebook admit it “had concerns” as early as December 2015 — contradicting earlier statements that it had learned of the breach only in 2018.

Channel 4 News — undercover sting (March 19–20, 2018)

Channel 4 News sent reporters posing as clients of a Sri Lankan political campaign. Alexander Nix (CEO of CA), on the recordings, boasted about:

offering “beautiful Ukrainian women to the home of a competitor”
capturing bribes on hidden video
operating under false identities and fictitious companies
fabricating emotionally powerful content for campaigns, tailored to voters’ fears

After broadcast — Mark Turnbull, managing director of CA Political Global, was suspended. Alexander Nix was suspended on March 20, 2018, then removed from CA.

Key people

Whistleblower

Christopher Wylie (b. 1989) — former director of research at CA. After going public, he published the book Mindfck: Cambridge Analytica and the Plot to Break America* (2019). He consulted for regulators and parliamentary committees (UK Parliament, US Congress, EU Parliament).

Investigative journalists

Carole Cadwalladr (The Observer/The Guardian) — for two years she largely ran the investigation on her own, often in isolation; she was sued by Arron Banks (who financed CA/Leave.EU), won her appeal in the UK High Court — a precedent for British press law. She received the Polk Award (2018) and the Orwell Prize (2018).
Harry Davies (The Guardian) — first (December 2015), ignored.
Matthew Rosenberg, Nicholas Confessore, Gabriel J.X. Dance (The New York Times) — parallel investigation, published March 17, 2018.
Jake Kanter, Lisa Carlin, Job Rabkin (Channel 4 News) — the sting operation.

Perpetrators / beneficiaries

Alexander Nix — CEO of CA; suspended and removed after the exposure; 20-year FTC ban (2019).
Aleksandr Kogan — Cambridge academic (2012–2018, then left the university); 20-year FTC ban.
Steve Bannon — vice president of CA; architect of the Trump campaign; later financial fraud charges in the “We Build the Wall” case (2020), pardoned by Trump (2021), convicted of contempt of Congress (2022).
Robert Mercer — billionaire financier (Renaissance Technologies); approximately $15 million in CA.
Rebekah Mercer — daughter of Robert, member of the CA board, co-owner of Breitbart.
Mark Zuckerberg — CEO of Meta; testified before Congress and the European Parliament; became synonymous with the phrase about “the senator with the glass glasses.”
Sheryl Sandberg — COO of Meta (until 2022).

Regulators

Elizabeth Denham — UK Information Commissioner (2016–2021); led the ICO investigation.
Joe Simons, Rohit Chopra, Rebecca Kelly Slaughter — FTC commissioners in 2019.
Ken Paxton — Texas Attorney General, drove the $1.4 billion settlement.

Company response

Meta (Facebook) — initial defense

The first public response: a post by Paul Grewal (VP & Deputy General Counsel) on March 17, 2018: “The claim that this is a data breach is completely false. Aleksandr Kogan requested and gained access to information from users who chose to sign up to his app, and everyone involved gave their consent.”

Alex Stamos, then CSO of Facebook, also tweeted that “this was not a leak” — a tweet he later deleted. Just 10 days later Stamos himself announced his departure from Facebook.

Analysis: technically Facebook was right that this was not a “breach” in the hacking sense — no one broke into its servers. But for the 87 million users whose data was used politically without their knowledge, the distinction was academic. The statement entered the canon of ham-fisted Big Tech PR responses.

Zuckerberg’s testimony before Congress (April 10–11, 2018)

Zuckerberg became the subject of memes on account of:

the exchange with Senator Hatch asking how Facebook makes money (Zuck: “Senator, we run ads”)
his almost robotic, “prepped” appearance
the notepad with talking points to himself on the table, which a Getty Images photographer zoomed in on

Meta’s remedial actions

suspension of CA, SCL, GSR
audit of “tens of thousands of apps” with data access
new developer policies
expanded “Download your data”
introduction of the “Ad Library” — a public registry of political ads
discontinuation of API v1.0 (already done earlier, in 2015)

Legal proceedings

US — FTC

2012 Consent Order — Facebook was already under FTC supervision for earlier privacy violations. The CA case breached that order.
July 24, 2019 — $5 billion — the largest FTC penalty in history (up to that point); a negotiated settlement in exchange for a 20-year 2019 Consent Order, which established an Independent Privacy Committee and quarterly reports to the FTC.

US — SEC

July 24, 2019 — $100 million — for misleading investors (failing to disclose the risk of data misuse by CA in 10-K filings for over two years, despite being aware since December 2015).

US — Texas

2022–2024 — Ken Paxton sues Meta for violating the Texas Capture or Use of Biometric Identifier Act (CUBI) and the Deceptive Trade Practices Act.
July 30, 2024 — $1.4 billion settlement — the largest in Texas state history in a privacy case.

US — consumer class action

2018–2022 — In re Facebook, Inc. Consumer Privacy User Profile Litigation (N.D. Cal., MDL 2843).
December 2022 — $725 million settlement. Class certification on April 17, 2023. Claims deadline: August 25, 2023.

US — shareholder derivative suit

2021–2025 — shareholder lawsuit in Delaware against Meta’s board.
July 17, 2025 — settlement on undisclosed terms in the Delaware Court of Chancery; shareholders had originally sought $8 billion (reimbursement of fines and costs after the CA scandal). The actual payout figure remains under confidentiality.

UK — ICO

October 2018 — 500,000 GBP fine — the maximum under DPA 1998. Elizabeth Denham’s comment: had the case occurred after May 25, 2018 (GDPR), the fine would have been significantly higher — up to 4% of global annual revenue.

Facebook v. FTC (2012) — the first Consent Order, foundational to the CA case.
In re Facebook, Inc. Consumer Privacy User Profile Litigation — now a precedent for the definition of harm in US privacy cases.

Penalties and settlements

Date	Authority / Party	Amount	Jurisdiction	Basis
10/24/2018	ICO UK	500,000 GBP	UK	DPA 1998
07/24/2019	FTC	$5,000,000,000	US	FTC Act sec. 5 + 2012 Consent Order
07/24/2019	SEC	$100,000,000	US	Securities Act, disclosure
12/06/2019	FTC (Nix)	ban + no monetary amount	US	FTC Act
12/06/2019	FTC (Kogan)	ban + no monetary amount	US	FTC Act
12/2022	Class action (Meta)	$725,000,000	US	Federal and state
07/30/2024	State of Texas	$1,400,000,000	US	CUBI, DTPA
07/17/2025	Shareholder derivative	undisclosed (plaintiffs sought $8B)	US (Delaware)	Breach of fiduciary duty

Total (approximate): ~$15.7 billion + 500,000 GBP (though the Texas settlement is also considered to cover the biometrics case, and the shareholder settlement encompasses broader oversight issues).

Precedents and implications

For EU law

The case coincided in time with the entry into force of the GDPR (May 25, 2018). Many GDPR provisions were refined in response to CA:
- Art. 25 — privacy by design as an obligation, not a recommendation
- Art. 32 — requirement of pseudonymization and encryption
- Art. 35 — data protection impact assessment (DPIA)
DSA (2022) — requirement to label political ads and mitigate systemic risks
Regulation on Political Advertising (2024) — regulates targeting based on political profiling

For US law

After CA, many states accelerated work on privacy legislation:
- California CCPA (2018, effective 2020)
- California CPRA (2020, effective 2023)
- Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and others
The inequity of federal law — to this day, the US has no federal privacy statute, in stark contrast to the EU.

For Big Tech practice

Closure of Graph API v1.0 (2015) — already done earlier, but CA revealed its real-world risk
Mandatory audits of third-party apps
Political ad transparency — Facebook Ad Library, Google Transparency Report
Growth of independent audits — firms like Mozilla, EFF, NOYB

For politics and democracy

After CA, it became common to view the 2016 election as a precedent for “democracy broken by technological disinformation.” Academic consensus is more cautious (CA’s real-world impact is hard to measure), but public discourse has shifted decisively — societies began to perceive Big Tech as a democratic threat, which translated directly into a regulatory mandate to introduce the DSA, DMA, and other frameworks.

Class actions

Case	Court	Status	Value	Affected parties
In re Facebook Inc. Consumer Privacy User Profile Litigation (MDL 2843)	N.D. Cal.	Settled 12/2022, payouts 2024	$725 million	approx. 250–280 million US FB users (2007–2022)
Shareholder derivative (In re Meta Platforms, Inc. Stockholder Litigation)	Delaware Chancery	Settled 07/17/2025	undisclosed (plaintiffs sought $8B)	Meta shareholders

Conclusions for citizens

What does this mean for me?

If you had a Facebook account between 2013 and 2015, it is statistically likely that your data (likes, location, friends) was pulled by the “thisisyourdigitallife” app, even if you never installed it yourself — it was enough for one of your friends with open privacy settings to do so. This data was used for political profiling in the US and likely in other countries.

How to protect yourself?

Periodically review third-party apps that have access to your Facebook account (Settings → Apps and websites)
Turn off “Platform for Friends” — the setting that lets friends share your data with apps you don’t use
Regularly download your data (Settings → Download your information) — so you know what Facebook has on you
Consider whether you need Facebook at all — the privacy costs are real
Educate friends and family — the problem of “viral” data sharing does not end at your own settings

What rights do I have?

GDPR Art. 15 — the right to access your data held by Facebook
GDPR Art. 17 — “the right to be forgotten”
GDPR Art. 21 — objection to processing for marketing purposes and political profiling
If you are a US resident: you can join other class actions (most are currently closed, but new ones arise)

Where to turn?

Poland: UODO — uodo.gov.pl
NOYB — noyb.eu
Irish DPC — Meta’s lead regulator in the EU

For mediators, lawyers, and advisors

The CA case is a textbook example of information asymmetry between platform and user; in privacy-related litigation it is often invoked as a precedent for “constructive consent” as a legal fiction.
For family and divorce mediators: psychometric targeting is used not only politically but also commercially (mortgage campaigns, insurance), which can have implications for contractual fairness and consumer exploitation.

Context

Christopher Wylie was 24 years old when he proposed the psychometric model to Bannon; his pink hair and eccentric look became an iconic image of the case. His quote: “I built Steve Bannon’s psychological warfare tool. It was his platform for manipulating people.”
Alexander Nix, on Channel 4’s hidden camera, laid out a full playbook of dirty tricks: “beautiful Ukrainian women at a politician’s home”, “bodies in bomb attacks in African campaigns” — a meme of compromise operations at the very top of the industry that circulates to this day.
Aleksandr Kogan is a tragicomic figure — born in Moldova, raised in Brooklyn, a Cambridge lecturer from 2012, he took home about $800,000 for delivering the data to CA (plus expenses), and lost his university position after 2018. Before the incident, he was known for research on oxytocin and kindness — an ironic contrast with what he did.
Mark Zuckerberg as meme — his Senate testimony produced viral images: stiff posture, identical blue shirts, a cushion on the chair, and a notepad of talking points beginning with “YOU MAY DECLINE TO ANSWER.”
Steve Bannon visited Warsaw and Budapest between 2017 and 2020, supporting Orbán and PiS; these threads, however, did not make it into the formal ICO investigation, though they appeared in Wylie’s commentary.
Boris Johnson held meetings with Alexander Nix in 2016, while serving as UK Foreign Secretary; the Foreign Office sought CA’s advice.
Emma Briant, an academic at the University of Essex, ran parallel research on CA and SCL for years before the case broke; her expertise was used by journalists and parliaments.
Lukoil, the Russian oil giant, according to Wylie expressed interest in CA’s data (the possibility of targeting American voters) — during meetings in Turkey and London in 2014–2015. Alexander Nix denied any ties in the UK Parliament.
The first signal in The Guardian (December 2015) was Harry Davies — but it is Carole Cadwalladr who is remembered, because she returned to the topic with Wylie as a whistleblower.
Carole Cadwalladr was sued by Arron Banks (a British billionaire who funded the Leave.EU campaign) for defamation; she won her appeal in the UK High Court in 2023 — a precedent defending investigative journalism against SLAPP suits.
One of the most “quoted” lines from Zuckerberg’s testimony: Senator Hatch — “How do you sustain a business model?” Zuck: “Senator, we run ads.” The moment was memified as a symbol of the technological gap between regulators and Big Tech.
After CA’s bankruptcy, successor firms such as Emerdata Ltd. were set up — many of the same people, new names. A recurring pattern in Big Tech.
The site [thisisyourdigitallife.com] no longer exists, but cached versions are in the Wayback Machine — the app was unusually simple graphically, a contrast with its scale.

Sources

Carole Cadwalladr, Emma Graham-Harrison, “Revealed: 50 million Facebook profiles harvested for Cambridge Analytica in major data breach,” The Observer/The Guardian, March 17, 2018. URL: https://www.theguardian.com/news/2018/mar/17/cambridge-analytica-facebook-influence-us-election (accessed: 2026-04-17)
Matthew Rosenberg, Nicholas Confessore, Carole Cadwalladr, “How Trump Consultants Exploited the Facebook Data of Millions,” The New York Times, March 17, 2018. URL: https://www.nytimes.com/2018/03/17/us/politics/cambridge-analytica-trump-campaign.html (accessed: 2026-04-17)
Harry Davies, “Ted Cruz using firm that harvested data on millions of unwitting Facebook users,” The Guardian, December 11, 2015. URL: https://www.theguardian.com/us-news/2015/dec/11/senator-ted-cruz-president-campaign-facebook-user-data (accessed: 2026-04-17)
Channel 4 News, “Exposed: Undercover secrets of Trump’s data firm,” March 19–20, 2018. URL: https://www.channel4.com/news/exposed-undercover-secrets-of-donald-trump-data-firm-cambridge-analytica (accessed: 2026-04-17)
Federal Trade Commission, “FTC Imposes $5 Billion Penalty and Sweeping New Privacy Restrictions on Facebook,” July 24, 2019. URL: https://www.ftc.gov/news-events/news/press-releases/2019/07/ftc-imposes-5-billion-penalty-sweeping-new-privacy-restrictions-facebook (accessed: 2026-04-17)
FTC, “Cambridge Analytica Kogan-Nix Complaint,” administrative filing, December 2019. URL: https://www.ftc.gov/system/files/documents/cases/182_3106_kogan-nix_complaint.pdf (accessed: 2026-04-17)
ICO UK, “Investigation into the use of data analytics in political campaigns,” report to Parliament, October 2020. URL: https://ico.org.uk/media/action-weve-taken/2618383/20201002_ico-o-ed-l-rtl-0181_to-julian-knight-mp.pdf (accessed: 2026-04-17)
Christopher Wylie, Mindfck: Cambridge Analytica and the Plot to Break America*, Random House, 2019.
Wikipedia (English), “Facebook–Cambridge Analytica data scandal,” as of March 2026. URL: https://en.wikipedia.org/wiki/Facebook%E2%80%93Cambridge_Analytica_data_scandal (accessed: 2026-04-17)
Wikipedia (English), “Cambridge Analytica.” URL: https://en.wikipedia.org/wiki/Cambridge_Analytica (accessed: 2026-04-17)
Wikipedia (English), “Aleksandr Kogan (scientist).” URL: https://en.wikipedia.org/wiki/Aleksandr_Kogan_(scientist) (accessed: 2026-04-17)
Ziad Ramley, “Cambridge Analytica: A timeline of events,” Medium, March 21, 2018. URL: https://medium.com/@ziadramley/cambridge-analytica-a-timeline-of-events-326ab3ef01a9 (accessed: 2026-04-17)
Jackson School of International Studies, University of Washington, “Facebook and Data Privacy in the Age of Cambridge Analytica,” academic analysis. URL: https://jsis.washington.edu/news/facebook-data-privacy-age-cambridge-analytica/ (accessed: 2026-04-17)
SourceWatch, “Cambridge Analytica,” encyclopedic entry. URL: https://www.sourcewatch.org/index.php/Cambridge_Analytica (accessed: 2026-04-17)
TEXTIFIRE Medium, “A Special Relationship & the Birth of Cambridge Analytica,” May 8, 2019. URL: https://medium.com/textifire/a-special-relationship-the-birth-of-cambridge-analytica-97633129cb06 (accessed: 2026-04-17)

Last updated: 2026-04-17 Card in database: A02_cambridge_analytica.md