Sources: Facebook's data-sharing deals under federal criminal investigation; an NY grand jury subpoenaed at least two device-makers who partnered with Facebook
Context & Ripple Effects
This story is the sharpest escalation yet in the Cambridge Analytica fallout. The DOJ's broadened criminal probe into Facebook's actions and statements already had the FBI, SEC, and FTC involved; now a New York grand jury has subpoenaed at least two device-maker partners, turning the inquiry from what Facebook said into what its partners did with user data.
The exposure traces directly to the June 2018 revelation that Facebook gave [[a:930209|60+ device makers, including Apple, Amazon, and Samsung, deeper access to personal info through private APIs]] than previously known. With six state attorneys general also probing Facebook's data handling since February, the company now faces overlapping criminal, civil, and state-level scrutiny of the same partnership program.
First-order effects
- At least two device-maker partners are now grand-jury subjects, meaning companies that took Facebook's private APIs face their own criminal legal exposure, not just reputational risk by association.
- Facebook's data-sharing deals shift from a privacy controversy to evidence in a criminal investigation, raising the stakes for any partner still relying on those arrangements.
Second-order effects
- The remaining device makers among the 60+ partners must decide whether to keep or unwind their Facebook integrations, since continued participation now carries subpoena risk.
- Parallel investigators — the FTC, SEC, FBI, and the six state AGs — can use the criminal probe's document trail to strengthen their own cases, compounding settlement leverage against Facebook.
Third-order effects
- If prosecutors treat data-access partnerships as potential criminal conduct, the platform-plus-hardware data pipeline becomes a structurally risky business model, pushing device makers toward contractual firewalls around user data.
- The stacking of federal, state, and international probes (the EU antitrust inquiry later sought internal documents on rival-squashing) points toward enforcement treating large platforms' data practices as a standing, multi-agency target rather than episodic scandals.
The trend: Regulators are escalating from civil privacy inquiries to criminal investigations of how platforms share user data with hardware partners, making every data-access deal a potential liability for both sides.