India issues notice to Facebook over data breach, demands answer by April 7

The government on Wednesday issued a notice to social networking giant Facebook, seeking its response over the user data breach and details of the measures it has put in place to ensure safety and prevent misuse of personal data.

The Ministry of Electronics and IT (Meity) today said that a notice seeking details relating to breach of data from Facebook had been sent to Cambridge Analytica particularly with regard to reports in the media about questionable practices attributed to the UK-based firm in their efforts to influence elections.

"It is felt that there is a need for further information about the data breach from Facebook. Accordingly, a letter has been issued by the Ministry of Electronics & IT on March 28, 2018 to Facebook seeking their response," Meity said in a statement.

The ministry has raised five questions in all including whether the personal data of Indian voters and users has been compromised by Cambridge Analytica or any other downstream entity in any manner.

The ministry has asked social media major to submit a reply whether the company or its related or downstream agencies utilising Facebook's data have previously been engaged by any entities "to manipulate the Indian electoral process".

The letter sent to Facebook said that at present, it has largest footprint in India in terms of its user base and sought its reply on proactive measures being taken by the company to ensure safety, security and privacy of such large user data and to prevent its misuse by any third party.

"Facebook has been called upon to give their response by April 7, 2018," the statement said. 

These are the five questions that Indian government asked Facebook to respond:

1. Whether the personal data of Indian voters and users has been compromised by Cambridge Analytica or any other down stream entity in any manner, and if so, how was it compromised?

2. Whether Facebook or its related or downstream agencies utilising Facebook’s data have previously been engaged by any entities to manipulate the Indian electoral process?

3. If any such downstream entity misused data from Facebook, what is the protection available to the data subject?

4. What are the specific steps proposed to be taken by Facebook to prevent any misuse of personal data for potential interference in, or manipulation of the Indian electoral process?

5. Facebook today has its largest footprint in India in terms of its user base and therefore what proactive measures are being taken to ensure the safety, security and privacy of such large user data andto prevent its misuse by any third party?

The government had earlier issued notice to Cambridge Analytica, the firm at the centre of Facebook users' data breach, seeking its response by March 31 on whether it was involved in misuse of data to profile Indians and influence their voting behaviour.

The notice also sought the company's response on the entities which engaged Cambridge Analytica, the method used by it for possession of data and whether consent was taken from users.

(With PTI inputs)