Without permission, eh? Not what I heard. But go ahead and go with that, Facebook.
My understanding the permission was granted only for the personality research test—but CA kept and reused the data for the political campaign.
Sure, FB are the ones with the deep pockets, but I’m not sure there is anything actionable against them in the CA case, and that is what this lawsuit is based on.
Update on March 17, 2018, 9:50 AM PT: The claim that this is a data breach is completely false. Aleksandr Kogan requested and gained access to information from users who chose to sign up to his app, and everyone involved gave their consent.