Respond to prefers-color-scheme dark in app web views

Follow section front redirects in Spectrum

Enable NLP source in PCS for load testing

Switch off the News Alerts Survey Widget when we have enough responses

Poll to determine if new LUF updates are available

Allows the winning A/B test variant to be turned on without Spectrum deployment

Show infinite scrolling sections in Assembler MultiView

Show option for NLP article summaries in Action Bar

A general feature flag for Recipe Features that aren't yet released

Feature flag for media team features that aren't yet released

Use new Orca video player for preroll plugin in Spectrum

Show the snow tracker (instead of the heat tracker) on Spectrum

Trump Media auditor charged by SEC with ‘massive fraud’

Google’s empire is massive. A judge will soon rule if it’s a monopoly.

Five tech products we actually like

Strangers help Sesame Street puppeteer after heirloom necklace was stolen

Teen grabs wheel when driver passes out and school bus veers into traffic

Cat climbed into Amazon return box, found alive 630 miles away

Ask Amy: My boyfriend just confessed he’s almost $20,000 in debt

Miss Manners: Is it inappropriate to reach out to old girlfriends?

Carolyn Hax: Longtime friend won’t forgive being last-minute canceled for a guy

Confident of victory over Ukraine, Russia exhibits Western war trophies

Northern Gaza is in ‘full-blown famine,’ World Food Program leader says

Two women are seeking Mexico’s presidency. But the race is about a man.

In photos: At least 39 dead as historic flooding hits southern Brazil

Conservatives don't get why Kristi Noem killed her dog

Rooftop rescue of flood victims in Brazil

Biden confronts campus protests; Trump hedges on accepting election results

Americans are more likely to oppose than support campus protests

The grinding familiarity of the jocks-vs.-hippies proxy fight

In a pinch, the Nationals finally find some offense

The Capitals, a team in transition, know what they want this offseason

Is Pastis as good as our food critic thought? He sent spies to find out.

The New York Times, alone in its outrage over access to Biden

The ‘Access Hollywood’ video cemented Trump’s air of invincibility

Wait, what is Stephen A. Smith talking about? Find out with our quiz.

The new cure-all for vacation excess: the IV drip 

What’s the best bus to New York? We tested 5 for comfort and value.

Adaptive equipment is making national parks more inclusive

The Post endorses April McClain Delaney and Tom Royals for Maryland’s 6th District

On Press Freedom Day, little to celebrate for Hong Kong’s journalists

Young Georgians want to be part of Europe. Their government is in the way.

Big Tech news and how to take control of your data and devices

See more coverage in your recommendations

Technology

Tips delivered to your inbox twice weekly

The Tech Friend newsletter

Business and Tech alerts

Jenny Starrs

Bastien Inzaurralde

Former Federal Trade Commission officials have been pulling out their calculators in recent weeks trying to figure out just how big a fine the commission could levy against Facebook for its latest privacy mishaps. Then they look at the numbers on their screens — if their calculators can even handle 13 digits — and try to put the massive scale into words.

William Kovacic, a former FTC chairman, may have come closest when he joked that the potential fine as totaling “more money than there is on the planet.” In other words, the theoretical limit to the fines could reach into the trillions of dollars should the FTC — in the investigation it started last month — find Facebook violated its 2011 consent decree on a scale affecting more than 100 million Americans.

That should be a bracing bit of math for the company. As most of Washington focuses on the political theatrics of Facebook <a href="https://www.washingtonpost.com/news/the-switch/wp/2018/04/09/facebook-chief-executive-mark-zuckerberg-to-captiol-hill-it-was-my-mistake-and-im-sorry/?utm_term=.cddd3cb4c6e5">chief executive Mark Zuckerberg</a> making his first appearance on Capitol Hill, it’s the FTC headquarters, an Art Deco-accented building a short walk away, that could pose the greater threat to the company.

Caveat No. 1: The FTC has not yet found any new violations, and <a href="https://www.washingtonpost.com/news/the-switch/wp/2018/03/20/ftc-opens-investigation-into-facebook-after-cambridge-analytica-scrapes-millions-of-users-personal-information/?utm_term=.dccf4b2b8a95">the investigation</a> is in its early stages. Facebook has repeatedly said it did not violate the consent decree.

Caveat No. 2: Kovacic’s estimate of “more money than there is on the planet,” made in an interview with The Washington Post over the weekend, covers only the actual currency — bills and coins — in the world. This typically is estimated at several trillions of dollars, denominated in various currencies, and not the far larger number held in various accounts.

Caveat No. 3: The FTC would never levy a fine, the former officials agree, that’s so large that it would imperil the future of Facebook. Plus, FTC officials have presumably have had some visibility into the company's data practices since 2011, when the consent decree mandated that the FTC monitor Facebook's data privacy practices.

But what’s clear is that the FTC — after years of trying to assert itself as the federal government’s most important watchdog of digital privacy — has a hammer of potentially historic size to wield over Facebook. Should the current group of FTC officials decide to use this hammer, the company could be forced into major concessions that could affect how it collects and handles data — two issues at the core of how the business makes money.

That outcome is arguably more likely than Congress finally passing strong digital privacy legislation and getting it signed by President Trump, after years of legislative inaction.

David Vladeck, a former FTC director of consumer protection who oversaw the consent decree with Facebook, says he expects the commission to find new violations in light of the company’s revelations last week.

Though he downplays talk of fines in the trillions of dollars, he estimates the probable fines <a href="https://www.washingtonpost.com/news/the-switch/wp/2018/04/08/facebook-could-face-record-fine-say-former-ftc-officials/?utm_term=.41ae82df2488">in the vicinity of $1 billion</a>, a record for FTC privacy fines.

However large the fines might be, “I certainly think that it gives the FTC leverage,” said Vladeck, now a Georgetown University law professor.

But here’s a look at the problem the company potentially faces. If you don’t have fairly advanced calculator handy, try a spreadsheet on your computer:

In the first column of your spreadsheet, <a href="https://www.washingtonpost.com/news/the-switch/wp/2018/04/04/facebook-said-the-personal-data-of-most-its-2-billion-users-has-been-collected-and-shared-with-outsiders/?utm_term=.8fd144b46724">enter 71 million</a>. That’s how many Americans Facebook has said had their data collected by a researcher working with Cambridge Analytica, a political consultancy hired by President Trump and other Republican candidates over the past two federal election cycles. This is the piece that the FTC already has said it’s investigating. It’s also the piece that the former FTC officials are most confident could lead to findings of new violations of the consent decree. (Worldwide, the number was of affected users was <a href="https://www.washingtonpost.com/news/the-switch/wp/2018/04/04/facebook-said-the-personal-data-of-most-its-2-billion-users-has-been-collected-and-shared-with-outsiders/?utm_term=.8fd144b46724">87 million</a>, but the FTC covers only violations against Americans).

In the second column, enter 110 million, or half of its user base in the United States. That’s a rough (and conservative) estimate of how many Americans were affected by the <a href="https://www.washingtonpost.com/news/the-switch/wp/2018/04/04/facebook-said-the-personal-data-of-most-its-2-billion-users-has-been-collected-and-shared-with-outsiders/?utm_term=.8fd144b46724">“scraping”</a> issue that Facebook acknowledged last week.

The company said “most” of its users probably had their data collected by “malicious actors” who abused Facebook’s search and account recovery tools. Though the data directly collected from Facebook was public profile data, the company has acknowledged that this scraping allowed the malicious actors to match phone numbers and email addresses collected on the “Dark Web” to identify the full names of users.

It amounts to a backdoor way to use Facebook tools to get sensitive personal information — and both phone numbers and email addresses typically qualify as “personally identifiable information” from a legal perspective — on users. With 220 million Americans using Facebook each month, it's fair to take half that number for this rough calculation.

This group no doubt overlaps in part with the 71 million affected by the Cambridge Analytica data problem, but the FTC could consider each incident a separate violation, effectively combining the two numbers for purposes of calculating a fine. Researchers also <a href="https://www.washingtonpost.com/news/the-switch/wp/2018/04/08/facebook-could-face-record-fine-say-former-ftc-officials/?utm_term=.5df083e321a1">had warned Facebook</a> for years of exactly this problem, and yet it continued, adding to the company's legal vulnerability under the consent decree.

So the third column should be the amount of potential FTC fines for each violation of a consent decree such as Facebook’s. That number goes up to a maximum of <a href="https://www.ftc.gov/news-events/press-releases/2018/01/ftc-publishes-inflation-adjusted-civil-penalty-amounts">$41,484.</a>

Now add the first column to the second and multiply that total by the third column.

But wait, it gets worse. The kind of data collection that led to Cambridge Analytica gaining access to detailed profile data on 71 million Americans — including their work histories, relationship statuses, their “likes” and much more — was routine for app developers before privacy changes that began in 2014.

Then there is the FTC’s definition of “violation.” Federal statutes give the FTC some latitude in defining the term for the purposes of setting fines. It could be every person affected. It could be every day that people overall were affected. It also could be the number of people affected <em>times</em> the number of days they were affected.

These forms of data collection happened on Facebook over the course of several years, the company has acknowledged. So as a very rough calculation, maybe multiply $7.5 trillion by five years by 365 days. That's not counting extra days for leap years.

At a certain point, of course, the answer to these calculations don’t matter. The FTC is not going to put Facebook out of business.

But the mere threat of a massive fine for Facebook, whose profits last year were $15.9 billion, gives the FTC rare power to demand that the company make changes in how it handles user privacy. The cost of these reforms — in terms of new staff to guard against intrusions or revenue foregone in the name of protecting users — could easily cost the company more money than any fine. Whatever the FTC demands, former officials say, Facebook is going to have a hard time refusing.

Connecticut College

Craig Timberg is a deputy managing editor for The Washington Post. Since joining The Post in 1998, he has been a reporter, editor and foreign correspondent, and he contributed to The Post’s Pulitzer Prize-winning coverage of the National Security Agency and the Jan. 6, 2021, attack on the U.S. Capitol.

Craig Timberg

American University, BA in Journalism

Tony Romm is the economic policy and accountability reporter at The Washington Post. 
