Facebook CEO Mark Zuckerberg on Wednesday faced a tough round of questions from House lawmakers on whether his company should face new laws or regulations after data from 87 million users was obtained, and in some cases faced clear threats that the social media giant would see some form of new rules.
Rep. Frank Pallone, the top Democrat on the House Energy and Commerce Committee, pressed Zuckerberg to admit that some regulations are needed and said he was glad to hear him concede this.
“I agree,” the New Jersey lawmaker said. “It’s time for this Congress to pass comprehensive legislation. If all we do is have a hearing and nothing happens, then we haven’t accomplished anything.”
Zuckerberg also promised Rep. Peter Welch, D-Vt., that Facebook was willing to work with Congress to pass legislation regarding users’ privacy concerns, though it came after a heated back-and-forth.
Welch asked “who gets the final say” on who can determine what personal information gets protected the most.
“And do you believe that the Federal Trade Commission or another properly resourced governmental agency with rulemaking authority should be able to determine on a regular basis what is considered personal information to provide certainty for consumers and companies what information needs to be protected most tightly?” Welch asked. “Who gets the final say? Is it the private market, companies like yours, or is there a governmental function here that defines what privacy is?”
Zuckerberg said this is an area where “some regulation makes sense,” but the “details matter.”
“Let me ask you this: Will you work with this committee to help the U.S. put in place our own privacy regulation that prioritizes consumers’ right to privacy? Just as the EU has done?” Welch asked.
“I’ll make sure that we work with you to flesh this out,” he said.
Chairman Greg Walden, R-Ore., wondered if Facebook “has not matured” and suggested that moderating regulations are needed. “I think it’s time to ask whether Facebook may have moved too fast and broken too many things,” he said.
During his Senate hearing Tuesday, Zuckerberg said he was open to regulation if it is the “right regulation,” and he told Rep. Fred Upton, R-Mich., on Wednesday regulation is “inevitable.”
Zuckerberg did not express explicit support for any specific legislation proposed and instead said the several ideas out there need to be studied further.
“We can’t exclusively rely on companies to self-regulate in the best interests of consumers. Would it be helpful if there was an entity clearly tasked with overseeing how consumer data is being collected, shared, and used which could offer guidelines — at least guidelines — for companies like yours to ensure your business practices are not in violations of the law?” asked Rep. Raul Ruiz, D-Calif.
Zuckerberg called the idea one “that deserves a lot of consideration,” but said that the “details on this really matter.”
Rep. Marsha Blackburn, R-Tenn., asked Zuckerberg if he would support the Browser Act, which would provide a uniform privacy code that would protect consumers on social media.
“What we think is we need for you to look at new legislation, and you’re hearing there will be more bills brought out in the next few weeks, but we have had a bill, the Browser Act, and I’m certain that you’re familiar with this. It’s bipartisan,” said Blackburn, a co-sponsor of the bill.
Blackburn asked Zuckerberg if he would work with Congress to pass the Browser Act.
“Congresswoman, I’m not directly familiar with the details of what you just said,” Zuckerberg replied. Rep. Leonard Lance, R-N.J., also used the hearing to ask Zuckerberg to read the Browser Act.
On Monday, the Transatlantic Consumer Dialogue wrote a letter to Zuckerberg on behalf of consumer and privacy organizations asking him to adopt the General Data Protection Regulation as “a baseline standard for all Facebook services.”
The new data protection law goes into effect in the European Union next month and says companies must provide a “reasonable” level of protection for personal data. Companies like Facebook and Google must explain clearly how they will use their users’ personal data in the EU and who they will share the data with.
