In a formerly undisclosed memo from March, a top FTC enforcement official said Facebook wasn't at fault for Cambridge Analytica's abuses; FTC says probe ongoing
Last spring, soon after Facebook acknowledged that the data of tens of millions of its users had improperly been obtained … Tweets: @nickconfessore , @justinhendrix , @jake_bernstein , @nytimes , @themoko , @nickconfessore , @matthewstoller , and @nickconfessore Tweets: Nick Confessore / @nickconfessore : NEW w/@ceciliakang: In wake of Cambridge Analytica scandal, a top FTC enforcement official drafted memo casting doubt on whether Facebook could be punished. Now the agency's Facebook probe looms as a referendum on the FTC's own future. http://www.nytimes.com/... Justin Hendrix / @justinhendrix : If you're wondering why Mark Zuckerberg behaves as if there is no one to hold him to account, it's because there is no one to hold him to account. http://twitter.com/... Jake Bernstein / @jake_bernstein : Almost alone among industrialized nations, the United States has no basic consumer privacy law. The F.T.C. serves as the country's de facto privacy regulator but it rarely bites. http://www.nytimes.com/... @nytimes : The Federal Trade Commission is failing to protect consumers from tech companies abuses of privacy and misuses of data, critics in Washington say. http://www.nytimes.com/... Jessica Powell / @themoko : It is really hard to imagine the FTC going after FB. Not just bc a Republican administration is less likely to regulate, but bc the agency's history doesn't suggest it will. That said, one could imagine tech regulation becoming a pillar of many Dem 2020 campaigns http://twitter.com/... Nick Confessore / @nickconfessore : In exclusive statement to NYT, new chair @JoeSimonsFTC hints that there is something coming down the pike re: Facebook. http://www.nytimes.com/... http://twitter.com/... Matt Stoller / @matthewstoller : The FTC staffer in charge of enforcement wrote a memo excusing Facebook for Cambridge Analytica and the commission stonewalled Congress and the public for 10 months. This problem isn't due to Congress, it's due to the loser antitrust establishment. http://www.nytimes.com/... Nick Confessore / @nickconfessore : That view may have changed since March, and former FTC officials tell us the Facebook probe has expanded far beyond Cambridge to include recent security breaches and secretive data deals that @nytimes has reported on this year. http://www.nytimes.com/...
Context & Ripple Effects
The Cambridge Analytica story began in March 2018 with [[a:927659|claims from former FTC officials that Facebook may have violated its 2011 privacy consent decree]], alongside bipartisan demands that Mark Zuckerberg testify while he and Sheryl Sandberg stayed silent. The Times' disclosure of the March memo adds an internal wrinkle: a top FTC enforcement official had already drafted doubts about whether Facebook could be punished at all, even as the agency publicly insists its probe is ongoing.
That tension makes the probe a referendum on the FTC itself — and the corpus shows how it resolved: the investigation ran sixteen months before ending in a $5B fine, with sources saying the agency initially weighed more direct liability for Zuckerberg and a larger penalty. Years later, the same institutional difficulty resurfaced when courts dismissed the FTC's antitrust suit against Facebook.
First-order effects
- Facebook's immediate legal exposure is thrown into question by its own regulator: if the enforcement staff doubted punishability in March, the consent-decree case built on those same facts faces internal skepticism even as the FTC keeps the probe formally open.
- The memo hands Congress fresh ammunition — lawmakers who spent March demanding Zuckerberg's testimony can now question whether the FTC was positioned to hold Facebook accountable from the start.
Second-order effects
- Pressure on the FTC to widen the case grows: per the relationships, former officials say the probe has already expanded beyond Cambridge Analytica into recent security breaches and secretive data deals, giving the agency grounds to act even if the original theory is weak.
- The episode raises the political cost of another lenient outcome — a settlement perceived as soft would invite legislators to move privacy authority out of the FTC's hands entirely.
Third-order effects
- If the pattern holds — skeptical staff memo, then a fine rather than structural liability, then the 2021 dismissal of the FTC's antitrust suit on the difficulty of making charges stick — the systemic answer is legislative: lawmakers strengthening outdated privacy and antitrust statutes so enforcers are not left arguing from a 2011 consent decree.
- Platform accountability would shift from case-by-case enforcement toward statutory rules, changing what regulators like the FTC can pursue against Facebook-class companies without needing to prove fault under legacy decrees.
The trend: US platform accountability is drifting from legacy consent-decree enforcement toward new legislation, as each FTC action against Facebook exposes the limits of the agency's existing tools.