{"id":22461,"date":"2017-11-14T16:12:38","date_gmt":"2017-11-14T21:12:38","guid":{"rendered":"https:\/\/digital.hbs.edu\/platform-rctom\/submission\/isolationism-and-your-facebook-profile-who-has-control\/"},"modified":"2017-11-14T21:33:43","modified_gmt":"2017-11-15T02:33:43","slug":"facebook-wants-to-bring-the-world-together-but-isolationism-could-tear-it-apart","status":"publish","type":"hck-submission","link":"https:\/\/d3.harvard.edu\/platform-rctom\/submission\/facebook-wants-to-bring-the-world-together-but-isolationism-could-tear-it-apart\/","title":{"rendered":"Facebook wants to bring the world together – but isolationism could tear it apart"},"content":{"rendered":"
\u201cWe will make sure the law is carried out, or else the company will stop working in Russia, as regretfully happened to LinkedIn. No exceptions will be made.\u201d<\/em><\/p>\n -Aleksandr Zharov, Head of Roskomnadzor<\/em>, Russian state media watchdog [1]<\/p>\n Over the last two decades, few innovations have aided in the rise of globalization as much as the proliferation of the Internet. Among the biggest beneficiaries of the new digital economy are U.S. tech giants like Facebook \u2013 now one of the top ten largest companies in the world by market cap [2] \u2013 which earns the bulk of its revenue from advertisements it serves online to its global audience of over 2 billion monthly active users [3]. However, recent worldwide trends towards isolationism threaten the way Internet companies store their data, and are forcing Facebook to answer some tough economic, strategic, and political questions.<\/p>\n Over the last few years, countries have begun to implement \u201cdata localization\u201d laws, which require all personal data on their citizens to be stored in data centers located within their borders [4]. Countries enact these laws to attract investment, give an advantage to local competitors, and protect their citizens from security and surveillance risks associated with their data being held outside of their jurisdiction [5]. By late 2015, a number of countries had implemented some level of data localization laws [6]:<\/p>\n A particularly rigid law went into effect in Russia in 2015 and \u201crequires \u2018personal data operators\u2019 to collect, store, and process any data about Russian users in databases inside the country\u201d [7]. The law (and others like it) presents a particularly thorny challenge for U.S. tech companies.<\/p>\n Facebook stores and manages most of its proprietary data internally, and currently has or is building 11 data centers around the world. While 3 are located in Northern Europe, the rest are all located within the U.S. [8].<\/p>\n Each data center requires a major investment of Facebook\u2019s resources. Their most recently announced, in Virginia, will cost $1 billion to build [9] and Facebook\u2019s cost of revenue, which consists primarily of data center-related costs, grew 36% in 2016 and represents 25% of Facebook\u2019s total expenses [10]:<\/p>\n Building a data center in Russia could also come with added costs associated with investing in a less developed local infrastructure and implementing new internal processes to identify which of its users are Russian citizens and ensure their personal data is all routed to and stored in the appropriate facility. The investment may not be a one-time cost either, as it could set a precedent for other countries considering adopting similar laws.<\/p>\n Aside from pure economic considerations, Facebook also has to evaluate the significant political and PR risks associated with complying with Russian government requests on data privacy, in light of the current political climate and controversy surrounding Facebook\u2019s inability to prevent Russian government-backed actors from using its platform to influence the 2016 U.S. election [11].<\/p>\n Facebook\u2019s initial response to the law was to attempt to negotiate terms with Russia in private, and it was successful in getting Russia to push back any planned inspections of its local data centers until 2018 [12]. However, other U.S. tech companies have been forced to pick a side, with Uber, eBay, and Apple agreeing to comply [13].<\/p>\n Meanwhile, LinkedIn refused, and Russia responded by banning the website nationally, a move that it is citing in threats to Facebook as it amps up the pressure to comply (see Aleksandr Zharov quote at top). With Facebook\u2019s current average revenue per European user at $6.85 [14], losing access to Russia\u2019s 144 million people could cost the company almost $1 billion in missed run-rate revenue.<\/p>\n For Facebook, the aforementioned costs associated with compliance are too great to accept. Storing all data locally would not only signal capitulation to the Russian government at a delicate time for the company, but would also leave the data particularly vulnerable to being intercepted by the government itself. Facebook prides itself on its protection of user privacy and has tussled with the Russian government before over demands to turn over user information. If that information is stored locally it will be much more difficult for the company to maintain control. Though the downside of losing access to Russia\u2019s population is significant, it may be somewhat mitigated by users bypassing local regulations and accessing the site over VPN, as has become common in China.<\/p>\n On the other hand, Facebook\u2019s mission statement is to \u201cbring the world closer together.\u201d Wouldn\u2019t leaving Russia altogether achieve the opposite effect, taking away the opportunity for Russians to engage in meaningful online interactions with other Facebook users around the globe, thereby aiding in the isolationist, anti-globalism movement that caused the law to be enacted in the first place?<\/p>\n What can Facebook do to further its mission and its business goals without compromising its values in Russia?<\/em><\/strong><\/p>\n (787 words)<\/p>\n <\/p>\n References:<\/p>\n [1] Interfax, \u201cRoskomnadzor: Facebook to stop working in Russia in 2018 unless complies with personal data localization law,\u201d Kyiv Post, September 26, 2017, https:\/\/www.kyivpost.com\/russia\/roskomnadzor-facebook-stop-working-russia-2018-unless-complies-personal-data-localization-law.html<\/a>, accessed November 2017.<\/p>\n [2] PWC, \u201cGlobal Top 100 Companies by market capitalization,\u201d March 31, 2017, https:\/\/www.pwc.com\/gx\/en\/audit-services\/assets\/pdf\/global-top-100-companies-2017-final.pdf<\/a>, accessed November 2017.<\/p>\n [3] Mark Zuckerberg, \u201cAs of this morning, the Facebook community is now officially 2 billion people,\u201d Facebook, June 27, 2017, https:\/\/www.facebook.com\/zuck\/posts\/10103831654565331<\/a>, accessed November 2017.<\/p>\n [4] Courtney Bowman, \u201cData Localization Laws: an Emerging Global Trend,\u201d Jurist, January 6, 2017, http:\/\/www.jurist.org\/hotline\/2017\/01\/Courtney-Bowman-data-localization.php<\/a>, accessed November 2017.<\/p>\n [5] Jyoti Panday, \u201cRising Demands for Data Localization a Response to Weak Data Protection Mechanisms,\u201d Electronic Frontier Foundation, August 14, 2017, https:\/\/www.eff.org\/deeplinks\/2017\/08\/rising-demands-data-localization-response-weak-data-protection-mechanisms<\/a>, accessed November 2017.<\/p>\n [6] Albright Stonebridge Group, Data Localization: A Challenge to Global Commerce and the Free Flow of Information,\u201d September 2015, https:\/\/www.albrightstonebridge.com\/files\/ASG%20Data%20Localization%20Report%20-%20September%202015.pdf<\/a>, accessed November 2017.<\/p>\n [7] Ibid.<\/p>\n [8] David Cohen, \u201cVirginia Is for Lovers \u2026 and a New Facebook Data Center,\u201d AdWeek, October 5, 2017, http:\/\/www.adweek.com\/digital\/henrico-virginia-facebook-data-center\/<\/a>, accessed November 2017.<\/p>\n [9] Ibid.<\/p>\n [10] Facebook, Inc., 2016 Form 10-K (filed February 3, 2017), p. 40, https:\/\/s21.q4cdn.com\/399680738\/files\/doc_financials\/annual_reports\/FB_AR_2016_FINAL.pdf<\/a>, accessed November 2017.<\/p>\n [11] Scott Shane, \u201cThese Are the Ads Russia Bought on Facebook in 2016,\u201d New York Times, November 1, 2017, https:\/\/www.nytimes.com\/2017\/11\/01\/us\/politics\/russia-2016-election-facebook.html<\/a>, accessed November 2017.<\/p>\n [12] Interfax, \u201cRoskomnadzor: Facebook to stop working in Russia in 2018 unless complies with personal data localization law,\u201d Kyiv Post, September 26, 2017, https:\/\/www.kyivpost.com\/russia\/roskomnadzor-facebook-stop-working-russia-2018-unless-complies-personal-data-localization-law.html<\/a>, accessed November 2017.<\/p>\n [13] Kimberly Gold and Vera Shaftan, \u201cRussia\u2019s data localization requirements delayed for Facebook, Google and Twitter,\u201d Data Protection Report, September 7, 2015, https:\/\/www.dataprotectionreport.com\/2015\/09\/russias-data-localization-requirements-delayed-for-facebook-google-and-twitter\/<\/a>, accessed November 2017.<\/p>\nThe Rise of “Data Protectionism”<\/h3>\n

\n
<\/a><\/p>\nData Center Operations and the Cost of Compliance<\/h3>\n
<\/p>\n<\/h3>\n
Facebook\u2019s Response<\/h3>\n
What next?<\/h3>\n