When Apologies Weren’t Enough
As the scale of the Facebook–Cambridge Analytica scandal emerged, a familiar script began: public outrage, corporate apologies, and promises to “do better.” This time, regulators decided that contrition alone would not suffice.
The UK’s Symbolic Maximum
In July 2018, the UK Information Commissioner moved first, announcing its intention to fine Facebook £500,000—the maximum allowed under the law in force at the time. The charge: failing to safeguard users’ information and thereby contravening data protection rules.
The amount was modest compared to Facebook’s revenue, but the message was sharp: the platform had exposed millions to a “serious risk of harm.” Facebook eventually agreed to pay the fine in October 2019.
A Record‑Breaking U.S. Settlement
Across the Atlantic, the U.S. Federal Trade Commission (FTC) built a far more sweeping case. In July 2019, it voted to fine Facebook $5 billion, one of the largest penalties ever imposed by the U.S. government for any violation.
The FTC cited Facebook’s longstanding pattern of breaking earlier privacy promises, including a 2012 order that was supposed to rein in data sharing. Violations ranged from apps accessing friends’ data to facial recognition defaults and the use of phone numbers for advertising.
The settlement did more than extract money: it placed Facebook under a new 20‑year oversight regime, reshaping how the company must handle privacy.
More Legal Blows
The same month, U.S. authorities sued Cambridge Analytica CEO Alexander Nix and developer Aleksandr Kogan, forcing them to destroy the data and related work products. Facebook later paid $100 million to the U.S. Securities and Exchange Commission for misleading investors about its data risks.
The saga culminated in 2022 when Meta agreed to pay $725 million to settle a private class action over improper data sharing.
These penalties did not undo the past. But they marked a line in the sand: for the first time, the cost of abusing user data was measured not just in lost trust—but in billions.