The CBI has booked UK-based Cambridge Analytica and Global Science Research Ltd for illegally harvesting data of Facebook users in India for commercial purposes, officials said on Friday.
The action came after a preliminary enquiry into the matter which showed that Global Science Research had created an app "thisisyourdigitallife" which was authorised by Facebook to collect specific datasets of its users for research and academic purposes in 2014, they said.
The company then entered into a criminal conspiracy with Cambridge Analytica, allowing it to use the data harvested by it for commercial purposes, the officials said.
Facebook had collected certificates from both the firms in 2016-17 that data collected by them using "thisisyourdigitallife" was accounted for and destroyed. However, the CBI enquiry did not find any evidence of any such destruction, according to the officials.
"The enquiry prima facie established that Global Science Research Ltd, UK dishonestly and fraudulently accessed data of app users of "thisisyourdigitallife" and their Facebook friends," an official said, citing the FIR.
After nearly 18 months of the preliminary enquiry, the CBI has booked the UK-based Cambridge Analytica and Global Science Research for alleged illegal harvesting of data of 5.62 lakh Indian Facebook users for profiteering and manipulating elections, officials said Friday.
The agency registered case against Cambridge Analytica and Global Science Research represented by Aleksandr Kogan, both based in the UK, under Indian Penal Code section related to criminal conspiracy and Information Technology Act violations related to receiving stolen computer resource and negligence in handling personal data collected by them, they said.
Based on news reports of illegal data harvesting to manipulate elections, the Ministry of Electronics and Information Technology (MeitY) had sent a complaint to the CBI on July 25, 2018 based on which the agency had registered a preliminary enquiry into the matter, they said.
It is alleged that Kogan of GSR had created an application "Thisisyourdigitallife" having permission from Facebook to collect certain categories of its users' data for "research and academic purposes".
It illegally collected additional data of not only the 335 users of the application but also of their friends' network on Facebook, the social media giant without their consent or knowledge, the FIR alleged.
The data was allegedly sold for commerical gains to Cambridge Analytica which used it for profiling users and influencing elections in India, the complaint alleged.
Although the application had 335 users in India, it was able to harvest data of 5.62 lakh Facebook members who were in their friends' network, Facebook had told the MeitY in its response.
Cambridge Analytica in its response had told the ministry that it received data of only US-based users from GSR.
The company did not respond to further queries, the complaint alleged.
During the enquiry, the CBI contacted all the 335 Indian users of the GSR's application out of which only six responded.
They all unanimously told the agency that they were not aware that their personal data and that of their friends was collected, the FIR said.
The users told the agency that they would not have used the application if they had known about the collection of personal data, it said.
After nearly 18 months, the CBI enquiry has prima facie established that GSR dishonestly and fraudulently accessed and harvested data of Facebook users without their consent or knowledge of including private chats, pages visited, demographic information etc, the FIR alleged.
The agency enquiry also established that GSR illegally gave the right to Cambridge Analytica to use the data for commercial gains, it alleged.