[cyphar]

> And by the way, you mention it was unethically of the Prof to sell the data, but what about CA buying it? Do they get a pass?

I think CA's (or any company's) micro-targeting of advertising using detailed profiles of the person is unethical in general, but whether or not CA is in the wrong for buying the data depends on whether they knew it was given them without the consent of users (I haven't followed whether we know that). But CA has a lot of other unethical things they do, so they don't get a pass in general.

But I feel that the bulk of the blame for this should be on Facebook's shoulders as well as the Prof who sold the data -- they both provided outside parties data for people that had no reasonable ability to consent to that dissemination.