Eight Years After Cambridge Analytica: Would It Even Matter Today?

Eight years ago this week, the Cambridge Analytica story exploded across headlines worldwide, and it felt seismic at the time as it was arguably one of the first times a data breach - on a global scale - was newsworthy.

The idea that a political consultancy had harvested data from millions of Facebook users without their consent sounded far-fetched, if not straight out of a dystopian novel. It raised questions about privacy, democracy, digital manipulation and whether social media companies had lost control of the data flowing through their platforms.

At its peak, the scandal involved information from up to 87 million Facebook users, gathered through a third-party app and used to build psychological profiles for targeted political messaging, leading to government-led investigations, regulators stepping in, and a heavily memed moment of Mark Zuckerberg being hauled before lawmakers.

For a moment, it looked like the entire tech industry might have reached a turning point. And yet, eight years later, the world looks very different, and the uncomfortable question worth asking is this: Would a scandal like Cambridge Analytica even feel shocking today?

When Data Misuse Became Front-Page News

Part of what made the Cambridge Analytica story so explosive in 2018 was that it pulled back the curtain on something most people hadn’t really thought about before - social media platforms didn’t just host conversations, they collect enormous amounts of behavioural data.

Slightly paraphrasing Yuval Noah Harari, in the brilliant book ‘21 Lessons for the 21st Century‘, he put forward the argument that if you’re getting things - in his case, news - for free, the chances are you’re the product. And that’s the case on social media, as this proved.

That shows itself in the form of what you like, click, share, interact with, stop to read, what you send to other people, the relationships/users tied to your account, your location and interests, and a whole bunch of other factors. All of these things are then fed into advertising systems that can - and do - target individuals with remarkable precision. 

The idea that this information could be used to build psychological profiles for political campaigns suddenly made people realise just how much data these platforms held.

For many users, it was the first moment they seriously questioned what happened to their information once they shared it online. And it still goes on now. 

If you’re not convinced, the next ad you see on, let’s say Instagram, press the three dots on the advert, and hit ‘why you’re seeing this ad’, and see the criteria it’s assigned to you.

The Industry Didn’t Collapse

At the time, the reaction felt existential for Facebook - you may remember how there were calls to delete accounts. Equally, regulators began drafting new rules and making social media a little less like the Wild West, even though - by that point - trust in the platform had taken a visible hit.

Yet the long-term outcome tells a very different story.

Today, sure, the company rebranded into ‘Meta’, but it remains one of the most valuable companies in the world, with a market value of roughly $1.6 trillion, and billions of people still use their platforms daily - across WhatsApp, Instagram, and Threads.

Similarly, despite being as easy to use as conducting open-heart surgery, their advertising revenue continues to grow, and that same data-driven business model still underpins much of the digital economy.

In other words, the scandal shifted the conversation about privacy but didn’t fundamentally alter the industry's trajectory.

The World Became Even More Data-Driven

In fact, the years since Cambridge Analytica have seen the digital economy move even deeper into data, with modern platforms collecting and processing more information than ever.

Artificial intelligence systems are trained on enormous datasets.
Advertising technology has become more sophisticated.
Online services personalise experiences based on behaviour.

Even outside social media, data now drives everything from recommendation engines to fraud detection systems.

The irony is that the same forces that made the Cambridge Analytica scandal alarming in 2018 have only intensified since then.

Data is now the foundation of much of the technology people rely on every day.

Privacy Fatigue

Another reason the scandal might feel different today is something researchers often call privacy fatigue.

Over the past decade, people have been exposed to an almost constant stream of data-related headlines. It’s not dissimilar to the topics you’ve heard us mention in our webinars, such as breaches or tracking. 

At some point, the extraordinary becomes routine.

The result is that many users now assume their data is being collected and processed in some form. The shock factor that surrounded Cambridge Analytica in 2018 may simply, just not land the same way today.

Does that mean people are comfortable with the situation? No. But it does suggest expectations have shifted.

The Real Legacy of Cambridge Analytica

While the scandal did little to dismantle the tech industry, or spark scenes like that classic 1984 Apple ad, where the hammer is thrown through a TV. 

But it did leave a lasting mark in other ways, and it undoubtedly accelerated regulatory scrutiny around data protection.

In Europe, the General Data Protection Regulation (GDPR) came into effect just months after the story broke, reshaping how organisations handle personal information and prompting companies to become more cautious about third-party data access.

And, for the wider benefit of businesses everywhere, conversations about digital privacy moved firmly into the mainstream.

The event effectively forced the public, governments and businesses to confront a new reality: personal data had become one of the most valuable resources in the digital economy.

The Lesson for Businesses

For organisations today, the real takeaway from Cambridge Analytica in a reflective lens isn’t about politics or social media, but rather data governance.

The scandal highlighted what can - and does - happen when large datasets move through systems without sufficient oversight or transparency.

Sure, most businesses aren’t running social media platforms on a scale of Facebook, I get it.

But many still collect, process and store significant amounts of information about customers, employees and partners. But do they control every aspect of it?

The answer here, too, is a resounding no, as data may live in:

Cloud platforms
SaaS tools
Analytics systems
Customer databases
AI platforms

Every one of those environments introduces questions about how data is accessed, shared and protected.

The technology has changed dramatically since 2018, but the core issue remains the same: if you don’t understand how your data moves, you cannot properly manage the risks it poses.

Eight Years On

Looking back, Cambridge Analytica was a defining moment in the story of digital privacy, revealing how powerful behavioural data could be when combined with sophisticated analytics.

It forced technology companies to answer difficult questions about how they used information.

But perhaps its most interesting legacy is the shift in perspective it created.

What once felt like an extraordinary scandal now sits within a much larger conversation about data, AI and digital ecosystems.

And that may be the clearest sign of how much the world has changed, especially as we continue to feed everything we can into AI.

Final Thought

The Cambridge Analytica story shocked people in 2018 because it revealed how much data platforms had quietly accumulated in the background.

Now, eight years later, we live in a world where data collection isn’t just expected. It’s embedded in the way modern technology works.

That does not make the issue less important, or that we should forgive and forget - if anything, it makes understanding data governance more critical than ever.

Because while scandals come and go, the systems that process information continue to grow quietly in the background... We’re looking at YOU, AI.

And the organisations that understand how data flows through those systems will always be better positioned than those that simply assume everything is under control.