Australian court orders Meta subsidiaries to pay $14 million over data use
(2023/07/26)
- Reference: 1690354579
- News link: https://www.theregister.co.uk/2023/07/26/australian_court_fines_meta_subsidiaries/
- Source link:
On Wednesday, Australia's Federal Court ordered two Meta subsidiaries to pay $14 million after an over two and a half year legal battle instigated by the country’s competition regulator found the pair misled users on the data collection of a now defunct VPN app.
The Zuckerberg companies were [1]ordered to pay $20 million Australian dollars ($13.5 million) in fines to the Commonwealth of Australia and over AU$400,000 ($270,000) in court costs to the Australian Competition and Consumer Commission (ACCC).
Israel-based web analytics company Onavo, maker of free downloadable software application Onavo Protect, was [2]acquired by Facebook in 2013. The narrative from Onavo at the time was that privacy was king. Meanwhile Facebook promised the company would be a separate brand.
[3]
But by 2018, researchers were onto the tall tale and [4]found Onavo Protect sent user data to Facebook even when turned off – a situation that was outlined and permitted through its terms and conditions.
[5]
[6]
According to the ACCC, information collected and aggregated [7]included "users' internet and app activity, such as records of every app they accessed and the number of seconds each day they spent using those apps" for Facebook's commercial benefit.
[8]Australia sues Facebook for slurping user data from Onavo Protect VPN app
[9]Facebook pulls 'snoopy' Onavo VPN from Apple's App Store after falling foul of rules
[10]Microsoft to hike prices in Australia and New Zealand
[11]Funnily enough, AI models must follow privacy law – including right to be forgotten
Onavo Protect soon became harder to download. Apple's App Store forbade apps from collecting data on the usage of other apps in 2018, thus forcing Facebook [12]to pull Onavo Protect from its digital shelves. Google Play followed suit when it [13]banned Android VPN apps it held from interfering with ads in 2019.
On Wednesday, the Australian court said that Onavo Inc. and Facebook Israel promoted the VPN during 2016 and 2017 without sufficiently disclosing that data would be used outside of the app.
"If an Australian user of Onavo Protect had a Facebook account, Meta was also able to combine that user's Onavo Protect Data with information that Meta maintained about the user's Facebook account, using an algorithm," wrote Judge Wendy Abraham.
[14]
She further noted that internal Meta documents referred to Onavo Protect as a "business intelligence tool," providing "a sample of users who we are able to know nearly everything they are doing on their mobile device." The data was then used for advertising, marketing and improvement of products, services and strategies.
According to the Australian court, the terms and conditions disclosing data use were not sufficient enough to counter advertisements to the contrary. Court documents state that both Facebook Israel and Onavo admit that ads and statements were likely to mislead or deceive.
Meta told The Register :
The ACCC acknowledged in the joint filing that the Onavo Protect listings were not deliberately misleading and disclosures were made in the app's Terms of Service and Privacy Policy. Furthermore, all user data was anonymized and aggregated before it was used by Meta.
The Onavo Protect app did provide users with a free, useful VPN service and it did function properly as an online security tool. There was no allegation by the ACCC that the app did not function properly as an online security tool."
Meta told The Register that Facebook Israel and Onavo jointly proposed the penalty to the court, which it approved.
Abraham said in court documents the fine "carries with it a sufficient sting to ensure that the penalty amount is not such as to be regarded by the parties or others as simply an acceptable cost of doing business."
[15]
Last year Meta made $116 billion globally, meaning the $14 million penalties represent roughly 4.4 percent of what the social media kraken pulled in during a typical day. ®
Get our [16]Tech Resources
[1] https://www.judgments.fedcourt.gov.au/judgments/Judgments/fca/single/2023/2023fca0842
[2] https://www.theregister.com/2013/10/14/facebook_acquires_onavo/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZMDuwhIqrvBbRSrG2312agAAABA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://www.theregister.com/2018/03/07/facebook_onavo_protect_doesnt_protect_against_facebook/
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZMDuwhIqrvBbRSrG2312agAAABA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZMDuwhIqrvBbRSrG2312agAAABA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2020/12/16/australia_sues_facebook_over_onavo_vpn/
[8] https://www.theregister.com/2020/12/16/australia_sues_facebook_over_onavo_vpn/
[9] https://www.theregister.com/2018/08/23/onavo_vpn_pulled_from_ios/
[10] https://www.theregister.com/2023/07/10/asia_tech_news_roundup/
[11] https://www.theregister.com/2023/07/13/ai_models_forgotten_data/
[12] https://www.theregister.com/2018/08/23/onavo_vpn_pulled_from_ios/
[13] https://www.theregister.com/2022/08/30/google_play_vpn_rules_changed/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZMDuwhIqrvBbRSrG2312agAAABA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZMDuwhIqrvBbRSrG2312agAAABA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://whitepapers.theregister.com/
The Zuckerberg companies were [1]ordered to pay $20 million Australian dollars ($13.5 million) in fines to the Commonwealth of Australia and over AU$400,000 ($270,000) in court costs to the Australian Competition and Consumer Commission (ACCC).
Israel-based web analytics company Onavo, maker of free downloadable software application Onavo Protect, was [2]acquired by Facebook in 2013. The narrative from Onavo at the time was that privacy was king. Meanwhile Facebook promised the company would be a separate brand.
[3]
But by 2018, researchers were onto the tall tale and [4]found Onavo Protect sent user data to Facebook even when turned off – a situation that was outlined and permitted through its terms and conditions.
[5]
[6]
According to the ACCC, information collected and aggregated [7]included "users' internet and app activity, such as records of every app they accessed and the number of seconds each day they spent using those apps" for Facebook's commercial benefit.
[8]Australia sues Facebook for slurping user data from Onavo Protect VPN app
[9]Facebook pulls 'snoopy' Onavo VPN from Apple's App Store after falling foul of rules
[10]Microsoft to hike prices in Australia and New Zealand
[11]Funnily enough, AI models must follow privacy law – including right to be forgotten
Onavo Protect soon became harder to download. Apple's App Store forbade apps from collecting data on the usage of other apps in 2018, thus forcing Facebook [12]to pull Onavo Protect from its digital shelves. Google Play followed suit when it [13]banned Android VPN apps it held from interfering with ads in 2019.
On Wednesday, the Australian court said that Onavo Inc. and Facebook Israel promoted the VPN during 2016 and 2017 without sufficiently disclosing that data would be used outside of the app.
"If an Australian user of Onavo Protect had a Facebook account, Meta was also able to combine that user's Onavo Protect Data with information that Meta maintained about the user's Facebook account, using an algorithm," wrote Judge Wendy Abraham.
[14]
She further noted that internal Meta documents referred to Onavo Protect as a "business intelligence tool," providing "a sample of users who we are able to know nearly everything they are doing on their mobile device." The data was then used for advertising, marketing and improvement of products, services and strategies.
According to the Australian court, the terms and conditions disclosing data use were not sufficient enough to counter advertisements to the contrary. Court documents state that both Facebook Israel and Onavo admit that ads and statements were likely to mislead or deceive.
Meta told The Register :
The ACCC acknowledged in the joint filing that the Onavo Protect listings were not deliberately misleading and disclosures were made in the app's Terms of Service and Privacy Policy. Furthermore, all user data was anonymized and aggregated before it was used by Meta.
The Onavo Protect app did provide users with a free, useful VPN service and it did function properly as an online security tool. There was no allegation by the ACCC that the app did not function properly as an online security tool."
Meta told The Register that Facebook Israel and Onavo jointly proposed the penalty to the court, which it approved.
Abraham said in court documents the fine "carries with it a sufficient sting to ensure that the penalty amount is not such as to be regarded by the parties or others as simply an acceptable cost of doing business."
[15]
Last year Meta made $116 billion globally, meaning the $14 million penalties represent roughly 4.4 percent of what the social media kraken pulled in during a typical day. ®
Get our [16]Tech Resources
[1] https://www.judgments.fedcourt.gov.au/judgments/Judgments/fca/single/2023/2023fca0842
[2] https://www.theregister.com/2013/10/14/facebook_acquires_onavo/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZMDuwhIqrvBbRSrG2312agAAABA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://www.theregister.com/2018/03/07/facebook_onavo_protect_doesnt_protect_against_facebook/
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZMDuwhIqrvBbRSrG2312agAAABA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZMDuwhIqrvBbRSrG2312agAAABA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2020/12/16/australia_sues_facebook_over_onavo_vpn/
[8] https://www.theregister.com/2020/12/16/australia_sues_facebook_over_onavo_vpn/
[9] https://www.theregister.com/2018/08/23/onavo_vpn_pulled_from_ios/
[10] https://www.theregister.com/2023/07/10/asia_tech_news_roundup/
[11] https://www.theregister.com/2023/07/13/ai_models_forgotten_data/
[12] https://www.theregister.com/2018/08/23/onavo_vpn_pulled_from_ios/
[13] https://www.theregister.com/2022/08/30/google_play_vpn_rules_changed/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZMDuwhIqrvBbRSrG2312agAAABA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/legal&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZMDuwhIqrvBbRSrG2312agAAABA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[16] https://whitepapers.theregister.com/
Phil O'Sophical
It's just whac-a-mole, the fines are peanuts so it won't stop until someone like Zuckerberg does jail time for contempt of court.
MOH
"Meta told The Register that Facebook Israel and Onavo jointly proposed the penalty to the court, which it approved."
Wtf?? So if I get charged with assault in Zuckerberg, can I propose the penalty of a parade in my honour?
They'll keep doing it while it keeps working.