Skip to main content
Psychological principles

A Nonverbal Analysis of Mark Zuckerberg’s Congress Testimony

By April 12, 2018August 23rd, 2025No Comments

Most of us are familiar with the fact that Mark Zuckerberg, CEO of Facebook, is testifying in front of Congress this week regarding Facebook’s mishandling of user data. This hearing is being watched around the globe by corporations, governments, and users alike. 

Like many of you, I am watching much of the hearing to see what is being said. But I also am watching much of it to see what is NOT being said, by doing a nonverbal analysis.  

This nonverbal analysis will cover microexpressions and body language tells that may reveal what Mr. Zuckerberg is thinking.  A microexpression is a 1/25th of a second muscular response in the face to emotional stimuli. Microexpressions, as proven by Dr. Ekman’s years of research, transcend cultures, race, gender, and age. Body language tells will encompass hand gestures, breathing, and blink ratios as well as other body positions that might reveal emotional content. 

Overall, Mr. Zuckerberg is professional, polite, and courteous. He calls each person “senator” or referred to them as “Mr.” or “Mrs. Chairman.”  He shows great patience and deals well with a barrage of attacks and questions for hours at a time. Many people are making comments about how scared he appears, and a few are trying to link that to lying. However, many viewers may be influenced by their own emotions on the topic. 

Let’s be honest, if you were about to sit in front of Congress and have every senator grill you for 10 hours, do you think you would be a tad bit nervous?  I think I would.  Some of the scientific signs we can notice on Mr. Zuckerberg that shows he certainly is nervous are lip licking, lip compression, swallowing, long bouts of drinking, and a higher than normal blink rate. 

Controlled but….

Mr. Zuckerberg appears stoic, controlled, and honest. Yet, despite that, there are some tells suggesting he is uncomfortable that I am able to pick out while watching. 

Like this one here in Fig 1.

A Nonverbal Analysis of Mark Zuckerberg’s Congress Testimony
Figure 1

Notice a few quick things about this picture.  Senator Bill Nelson asks him if he feels he has an ethical obligation to notify 85 million Facebook users of a data breach. Before he answers, Mr. Zuckerberg flashes an extreme frown. This indicates discomfort, disagreement, and anxiety. But I want you to really look at Joel Kaplan, the Vice President of global policy at Facebook, behind Mr. Zuckerberg.  Right after Senator Nelson asks this question, Kaplan flashes contempt. A very strong emotion indeed. 

At the same time, Mr. Zuckerberg does a very subtle left shoulder shrug, which is an indicator that he lacks confidence in the statement he is about to say. 

A little later, during Senator Orrin Hatch’s comments about regulation, Mr. Zuckerberg again shows a serious level of facial anxiety, as seen in Fig 2. 

A Nonverbal Analysis of Mark Zuckerberg’s Congress Testimony
Figure 2

A series of senators really drill into Facebook’s terms of service, and it is at this time we see a lot of facial anxiety that looks like parts of the sadness facial expression on Mr. Zuckerberg. According to Dr. Ekman, in his book “Emotions Revealed,” when the mouth shows sadness without the existence of sadness in other parts of the face, this will generally denote disbelief or negation. (pg 104) 

April 11th, Mr. Zuckerberg appears before The House Energy & Commerce Committee.  It is generally the same setup, where each representative will have a period of time to ask Mr. Zuckerberg a few questions about Facebook and data and privacy.  

When Representative Greg Walden asks him why privacy was not more important to him as a CEO, Mr. Zuckerberg flashes contempt as seen in Fig 3. 

A Nonverbal Analysis of Mark Zuckerberg’s Congress Testimony
Figure 3

The contempt is very subtle, but when played in slow motion you can see it much more clearly. 

What does this mean?

What does all of this mean? Do any of these nonverbal tells indicate that Mr. Zuckerberg was lying? 

No, not at all. It is important to remember a few factors:

  1. The situation is high stress, so seeing stress indicators is not unexpected;
  2. Without the ability for us to ask Mr. Zuckerberg questions, we cannot possibly make connections between incongruences and truth or falsehoods; and
  3. Things like seeing disagreement nonverbally can be for many reasons, and none of that means he is outright lying. One of the things I learned from writing “Unmasking the Social Engineer” with Dr. Ekman was that you might be able to see the WHAT, but you do not know the WHY until you can ask questions. 

Now, don’t take all of this as support for Facebook. It is appalling to me that they breached 85 million people’s data and did not feel the need to inform us of even the potential damage to our Personally Identifiable Information (PII) and data. In today’s social media world, events like this are a good reminder that we are constantly giving permission to 3rd parties to do what they will with our information. 

Stay safe. 

 

 

Security Assessment Case Study
Learn more about the importance of a Social Engineering Risk Assessment.
Security Assessment Case Study
Learn more about the importance of a Social Engineering Risk Assessment.
What Makes Us Different
At Social-Engineer, we pride ourselves on what we do and how we do it. We are a security services provider, focusing on four primary attack vectors. This case study will go through how we can protect your company and what makes us different.
What Makes Us Different
At Social-Engineer, we pride ourselves on what we do and how we do it. We are a security services provider, focusing on four primary attack vectors. This case study will go through how we can protect your company and what makes us different.
Woman vs Machine
Technology is providing new, more innovative ways to enhance our world. Scientists are constantly developing smarter, faster and more intelligent machines, systems and robots. There is no doubt that each of these has evolved beyond their clockwork origins.
Woman vs Machine
Technology is providing new, more innovative ways to enhance our world. Scientists are constantly developing smarter, faster and more intelligent machines, systems and robots. There is no doubt that each of these has evolved beyond their clockwork origins.
Vishing and Phishing Must Be Ongoing to Be Effective
Most companies have a security awareness program in one form or another. If they don’t, it should be on the short list of programs to start as soon as possible. In our experience, many of these programs take the form of computer-based training.
Vishing and Phishing Must Be Ongoing to Be Effective
Most companies have a security awareness program in one form or another. If they don’t, it should be on the short list of programs to start as soon as possible. In our experience, many of these programs take the form of computer-based training.
A Case Study in Vishing
Vishing (voice-based phishing) has been a problem for quite a long time. There are many vendors in the marketplace that offer vishing services. However they tend to use robo-callers or call centers for large volume engagements. If they are using trained humans to make calls, it is likely in very low numbers.
A Case Study in Vishing
Vishing (voice-based phishing) has been a problem for quite a long time. There are many vendors in the marketplace that offer vishing services. However they tend to use robo-callers or call centers for large volume engagements. If they are using trained humans to make calls, it is likely in very low numbers.
Benefits of a Social-Engineering Risk Assessment Engagement
Your company is important. Indeed, the data you hold for your clients or employees is very valuable and attackers seek to capitalize on that data any way they can. This is where a Social Engineering Risk Assessment (SERA) engagement can help uncover possible vulnerability to attackers.
Benefits of a Social-Engineering Risk Assessment Engagement
Your company is important. Indeed, the data you hold for your clients or employees is very valuable and attackers seek to capitalize on that data any way they can. This is where a Social Engineering Risk Assessment (SERA) engagement can help uncover possible vulnerability to attackers.
The Business Value of the Social-Engineer Phishing Service
Cybercriminals are targeting the human element of organizations. Additionally, they are developing techniques to use an organization’s employees as the first point of entry. According to the 2021 Verizon DBIR report, of the 3,841 security breaches reported using social engineering, phishing was the key vector for over 80% of them.
The Business Value of the Social-Engineer Phishing Service
Cybercriminals are targeting the human element of organizations. Additionally, they are developing techniques to use an organization’s employees as the first point of entry. According to the 2021 Verizon DBIR report, of the 3,841 security breaches reported using social engineering, phishing was the key vector for over 80% of them.