Facebook tells LA police to stop spying on users with fake accounts

Facebook has written to the Los Angeles Police Department (LAPD), demanding that it stop setting up fake profiles to conduct surveillance on users.

This comes after the Guardian revealed that the US police department had been working with a tech firm, analysing user data to help solve crimes.

Facebook expressly prohibits the creation and use of fake accounts.

The intent, it said, was to "create a safe environment where people can trust and hold one another accountable".

"Not only do LAPD instructional documents use Facebook as an explicit example in advising officers to set up fake social media accounts, but documents also indicate that LAPD policies simply allow officers to create fake accounts for 'online investigative activity'," wrote Facebook's vice president and deputy general counsel for civil rights Roy Austin in a letter outlining Facebook's policies.

"While the legitimacy of such policies may be up to the LAPD, officers must abide by Facebook's policies when creating accounts on our services. The Police Department should cease all activities on Facebook that involve the use of fake accounts, impersonation of others, and collection of data for surveillance purposes."

Documents obtained through public record requests made by non-profit organisation the Brennan Center of Justice showed that in 2019, the LAPD had been using Voyager Labs' social media surveillance software to collect data from suspects' social media networks, including their friends' accounts.

Voyager Labs claims its software is able to analyse large amounts data to help solve crimes, including helping to discern users' motives and beliefs.

The LAPD said in emails that the software had been particularly useful in investigating the activities of street gangs online and crucial in helping its robbery and homicide division collect evidence.

Facebook argues that spying on users and impersonating legitimate users goes against its purpose, which is to enable people to "connect and share with real people using their authentic identities".

However, Robert Potter, an Australian security expert specialising in lawful surveillance, thinks fake names can be justified in situations where human rights activists or journalists are seeking to protect their privacy online, or for users in countries where there is internet censorship.

"It's genuinely interesting to see that Facebook has become the nexus for so many problematic communications, from child trafficking and terrorism communications to Covid disinformation," he told the BBC.

"Yet they seem to care more about the LAPD misusing their platform than sometimes they do about China or Russia."

Facebook said the researchers' data-scraping browser extension tool undermined its security, while the academics argued that their work was vital in maintaining democracy and keeping the social network's practices transparent.

"If you're not cracking down across the board on malicious actors using your platform, you don't have strong grounds to crack down on legitimate use of the platform," said Mr Potter, who built the Washington Post's cyber-security operations centre and has advised the Australian government on cyber-security.

"You're not special if you run a social media platform. If there's not a rule saying you can't have an undercover cop in a church, why should a social media platform be any different?"