Every day companies mine online data to track consumer habits, but two University of Maryland law professors say Facebook and dating service OkCupid went too far by manipulating their users' experience to study their behavior.
At the professors' urging, Maryland Attorney General Douglas F. Gansler agreed to review this week whether the companies' actions are akin to patients being pulled into medical research without their knowledge. Federal law requires participants' consent and independent oversight of such experiments, and a state law broadened those regulations.
But Facebook officials say those rules don't apply to its research, including a recently disclosed project that measured users' moods after adjusting the tone of the posts that appeared to them. The social network described its research as product testing, permitted under the terms of service users agree to before participating on the site.
The professors' allegations open a new facet in the debate over consumer privacy — whether companies can fairly or properly use their massive stores of consumer behavior data to learn more about human nature, whether for the benefit of the public or the companies themselves. Gansler said the issue may not be whether what the social networks did was legal, but whether it was ethical.
"It may or may not be a violation, technically, of the law as the professors set forth; it may or may not be a violation of the users' privacy," Gansler said. "But that doesn't mean it's the right thing to do, that there isn't a sort of better way of doing it."
Both companies faced criticism in recent months after revealing data they gathered through experiments in which they altered users' experiences on their websites and measured the effects.
In a Facebook experiment in 2012, a company employee worked with researchers at Cornell University to study whether users' moods responded to their Facebook feeds. The researchers showed 689,000 users fewer posts that contained emotional language, and then analyzed their posts for emotional language. They found that users who saw fewer positive posts used fewer positive words in their own posts.
This summer, OkCupid revealed a handful of experiments it conducted on users. In one, the dating website, which uses algorithms to give users compatibility ratings, altered the ratings so that "bad" matches were assigned strong compatibility ratings and "good" matches were assigned low ratings.
"When we tell people they are a good match, they act as if they are," the company found, according to a July post on the company's blog. "Even when they should be wrong for each other."
But James Grimmelmann and Leslie Meltzer Henry, both professors at the Francis King Carey School of Law, say that just like academics or other researchers, the websites should have notified users they were participating in the experiments.
"This is about whether Facebook and OkCupid are unwittingly using their users as research subjects without their consent and without any ethical oversight," Henry said in an interview.
Grimmelmann and Henry suggest that the companies violated the spirit of what is known as the Common Rule and the letter of a state law by not allowing customers to choose whether to participate in the research.
"We ask only that Facebook and OkCupid be held to the same standards everyone else is, just as Maryland law requires," the professors wrote in a letter to Gansler on Tuesday.
In place since 1981, the Common Rule requires researchers conducting medical and behavioral experiments to receive human subjects' informed consent before including them. The rule also requires researchers to get their experiments vetted by an institutional review board, a panel of peers that reviews projects for ethical concerns. The rule applies mainly to federally funded research, but the Maryland General Assembly broadened its reach with a law passed in 2002, applying the requirements to all research conducted in Maryland.
Facebook officials, responding in a letter to Grimmelmann and Henry, said the website's research is not subject to the law, describing it as product testing explicitly disclosed in its terms of service, not scientific experiments.
"We know some people were upset by this study and we are taking a hard look at our internal processes as a result," Facebook spokesman Israel Hernandez said in a statement. "The requirements specified by the federal Common Rule and Maryland law do not apply to research conducted under these circumstances."
OkCupid officials did not respond to requests for comment.
Gansler said state lawyers have worked closely in the past with Facebook about privacy concerns, but never on any issues related to research ethics. He said he expects the site to cooperate.