# Shadow Profiles "Shadow profiles" is the data-extraction-and-surveillance practice designating the construction of personal-data profiles for individuals who are *not* registered users of a platform, through aggregation of data those non-users' registered-user contacts have provided (contact-list uploads, photo-tagging, address-book sync, transaction-counterparty data) combined with web-tracking data, public-records data, and adjacent data-broker sources. The term was substantially-popularized through 2011-2018 reporting on Facebook's data-practices and entered mainstream surveillance-capitalism analytical-vocabulary through [[Mark Zuckerberg]]'s April 2018 Congressional testimony in which he was substantially-questioned about the practice and substantially-failed to fully-disclose it. The practice substantially-extends beyond Facebook to multiple contemporary platform-and-data-broker infrastructures. The word's analytical interest is the practice's **non-consent register**: the data subjects are not users of the platform, have not consented to data-extraction, and frequently have no awareness that comprehensive personal-data profiles are being maintained about them. The practice makes visible one of the principal contemporary limitations of consumer-consent-based surveillance-capitalism regulation: individuals who have *never registered* for a platform's services have substantially-no consent-based mechanism for restricting the platform's data-extraction-and-profile-maintenance about them. The shadow-profile case is one of the principal documentary cases of consent-based regulatory-framework inadequacy in the contemporary surveillance-capitalism landscape. ## Practice Mechanics **Contact-list aggregation.** Platform users frequently upload their device contact-lists during platform setup or feature-use. The contact-list data — name, phone number, email address, sometimes address and adjacent personal-data fields — is retained by the platform and aggregated across users. When the same non-user appears in multiple users' contact-lists with different data-fields, the platform substantially-constructs a more-complete profile than any single user's contact-list contained. **Photo-tagging and facial-recognition.** Platform users tag non-users in uploaded photos; the platform's facial-recognition systems match unrecognized faces across photos to construct visual-identity profiles for non-users. Facebook's facial-recognition system (substantially-discontinued in 2021 following litigation) operated extensively on shadow-profile-targeted non-users. **Web-tracking integration.** Platform tracking-pixel infrastructure deployed across third-party websites (the Facebook Pixel, the Google Analytics tracking system, the broader adtech tracking-pixel infrastructure) collects browsing-behavior data for both registered users and non-users. The browsing-behavior data is integrated with other data-streams to construct comprehensive behavioral profiles. **Data-broker integration.** Platform data-extraction operations integrate with the broader commercial data-broker industry (Acxiom, LexisNexis, Experian, Oracle Data Cloud, and adjacent vendors), aggregating public-records data, commercial-transaction data, household-composition data, and adjacent data-streams into comprehensive profiles for both registered users and non-users. **Cross-platform aggregation.** Major platform infrastructures (Meta family, Google family, Amazon family) operate cross-platform data-aggregation across their owned-and-operated properties, substantially-extending shadow-profile-construction across the entire platform ecosystem rather than within single platforms. ## Notable Cases **Facebook shadow profiles (2011-2018).** The 2011 Australian Privacy Foundation investigation, the 2013 Facebook bug disclosure of shadow-profile data leakage, subsequent investigative reporting (notably Kashmir Hill's coverage), and the April 2018 Zuckerberg Congressional testimony collectively established the documentary record of Facebook's shadow-profile practice. The practice substantially-persisted through the 2018 [[Cambridge Analytica]] controversy and beyond. **Cambridge Analytica connections.** The 2018 [[Cambridge Analytica Scandal]] substantially-relied on shadow-profile-style data extraction beyond consenting-user-base data. The "This is Your Digital Life" personality-quiz app collected data on app-users' friends without those friends' direct consent, substantially-replicating shadow-profile practice within a research-app framework. **Clearview AI as facial-recognition shadow-profile case.** [[Clearview AI]]'s product operates as substantial facial-recognition-shadow-profile infrastructure: the company's database is built from publicly-scraped web images of individuals who have not consented to the database's construction or use. **Data-broker industry.** The broader commercial data-broker industry operates substantially as shadow-profile infrastructure at industrial scale. Acxiom, LexisNexis, Experian, and adjacent vendors maintain comprehensive personal-data profiles for substantial-majorities of the U.S. adult population, frequently without direct individual consent. ## Why It Matters for the KB **Non-consent surveillance-capitalism documentary case.** The shadow-profile practice is one of the principal documentary cases of non-consent-based surveillance-capitalism data-extraction. Tracking the practice is essential to understanding the broader limitations of consumer-consent-based regulatory frameworks in the contemporary surveillance-capitalism landscape. **Cross-platform data-aggregation infrastructure.** Shadow-profile practice operates within and across the broader cross-platform data-aggregation infrastructure that has substantially-expanded across the post-2010 period. Tracking shadow-profile practice is useful for understanding the broader contemporary cross-platform data-aggregation landscape. **Regulatory-framework gap analytical resource.** The shadow-profile case makes visible one of the principal gaps in contemporary surveillance-capitalism regulatory frameworks: individuals who have never registered for a platform's services have substantially-no consent-based mechanism for restricting the platform's data-extraction-and-profile-maintenance about them. The case is essential to understanding the structural-limitations of consent-based regulatory approaches. **[[Surveillance Capitalism]] foundational vocabulary.** The shadow-profile concept is one of the principal foundational analytical-vocabulary items in contemporary surveillance-capitalism analytical-literature. Tracking the vocabulary is useful for engaging with the broader scholarly-and-civil-liberties literature. ## See Also - [[Surveillance Capitalism]] — the broader economic-structural Concept - [[Surveillance State]] — the adjacent state-infrastructure Concept - [[Facial Recognition]] — adjacent surveillance-vocabulary - [[Cambridge Analytica Scandal]] — adjacent case-event - [[Clearview AI]] — adjacent facial-recognition-shadow-profile case - [[Palantir]] — adjacent integrated-data-analytics surveillance-vendor