Facebook will pay an unprecedented $5 billion penalty over privacy breaches

The Federal Trade Commission announced a $5 billion settlement with Facebook on Wednesday, resolving a sweeping investigation by regulators into how the comp...

Posted: Jul 24, 2019 9:45 AM
Updated: Jul 24, 2019 4:45 PM

The Federal Trade Commission announced a $5 billion settlement with Facebook on Wednesday, resolving a sweeping investigation by regulators into how the company lost control over massive troves of personal data and mishandled its communications with users. It is the largest fine in FTC history — and yet still only about a month's worth of revenue for Facebook.

The deal comes amid growing calls in Washington for greater transparency and accountability for technology companies, whose power over social movements as well as personal information has increasingly come to be seen as dangerous by politicians, users, and even one of Facebook's co-founders.

Facebook agreed to the deal following years of damaging admissions about the company's privacy practices, such as the inadvertent exposure of up to 87 million users' information to the political analysis firm Cambridge Analytica.

The settlement resolves a formal complaint by the FTC alleging that Facebook 'used deceptive disclosures and settings' that eroded user privacy, violating a prior agreement Facebook signed with the commission in 2012. Facebook also broke the law, the FTC alleged, by misusing phone numbers obtained for account security purposes to also target advertisements to its users. And the company allegedly deceived 'tens of millions of users' by implying that a facial recognition feature on the service had not been enabled by default, when in fact it had.

'The magnitude of the $5 billion penalty and sweeping conduct relief are unprecedented in the history of the FTC,' said Chairman Joseph Simons in a statement. 'The relief is designed not only to punish future violations but, more importantly, to change Facebook's entire privacy culture to decrease the likelihood of continued violations.'

In a Facebook post published shortly after the FTC's announcement Wednesday, company CEO Mark Zuckerberg said, 'We've agreed to pay a historic fine, but even more important, we're going to make some major structural changes to how we build products and run this company. We have a responsibility to protect people's privacy. We already work hard to live up to this responsibility, but now we're going to set a completely new standard for our industry.'

Separately Wednesday, the Securities and Exchange Commission announced that Facebook had agreed to pay $100 million to settle 'charges... for making misleading disclosures regarding the risk of misuse of Facebook user data.'

Facebook's stock was down slightly when the market opened Wednesday morning.

The FTC settlement — which also covers Facebook subsidiaries Instagram and WhatsApp — could set the tone for a wave of further action by policymakers worldwide as they seek to rein in the most powerful players in Silicon Valley.

The $5 billion fine is nearly 30 times the FTC's largest-ever civil penalty to date — $168 million, which was levied on Dish Network in 2017 — reflecting the tremendous scale of Facebook's operations, as well as the enormity of its self-admitted mistakes.

In addition to the record civil penalty, Facebook also agreed to accept greater oversight of its privacy practices. Under the FTC deal, Facebook's board will form a privacy oversight committee made up of independent members who cannot be fired by Zuckerberg alone. That committee will be charged with appointing still other officials who must periodically and truthfully certify that Facebook is complying with the FTC agreement, or risk being held personally liable. Zuckerberg will also be required to make those same certifications, the FTC said.

'False certifications would subject Mr. Zuckerberg and the [designated compliance officers] to personal liability, including civil and criminal penalties,' Simons said in a statement written jointly with the Commission's two other Republican members, Christine Wilson and Noah Phillips.

The FTC also required that regular third-party assessments of Facebook's privacy practices not rely on company materials but instead on the auditor's own fact-finding.

The FTC voted 3-2 to approve the settlement, with the agency's two Democrats dissenting because they believed the measure did not go far enough. In dissents, Commissioners Rohit Chopra and Rebecca Slaughter said they believed the fines were far too small, and that the FTC wrongfully gave Zuckerberg and Facebook COO Sheryl Sandberg a pass.

'Failing to hold them accountable only encourages other officers to be similarly neglectful in discharging their legal obligations,' wrote Chopra. 'In my view, it is appropriate to charge officers and directors personally when there is reason to believe that they have meaningfully participated in unlawful conduct, or negligently turned a blind eye toward their subordinates doing the same.'

Other prominent tech critics, including Democratic Sen. Richard Blumenthal of Connecticut and Missouri Republican Sen. Josh Hawley, have said a $5 billion fine would be 'a bargain' for Facebook. In an earnings report earlier this year, Facebook said it was setting aside $3 billion to help cover expenses related to the expected penalty. It reported quarterly revenues of $15 billion at the time and its stock rose after it announced the charge, signaling investors were relieved by the probable outcome.

Facebook initially offered to pay $0 to resolve the Federal Trade Commission's investigation into the tech giant's privacy practices, according to details of the closed-door negotiations obtained by CNN.

The company later increased that number to $100 million, but its highest offer in the talks topped out at $1 billion, James Kohm, director of the FTC's enforcement division and a lead agency negotiator, told CNN in an interview Wednesday.

That is far less than the $5 billion Facebook eventually agreed to pay. But it also pales in comparison to the tens of billions that the FTC initially sought from Facebook for violating a 2012 privacy-related consent order.

Kohm described that stage of the talks as early and said that Facebook's proposals at the time were not serious. When the two sides reached a ballpark amount, the talks became more serious and shifted to other proposed measures such as changes the FTC wanted from Facebook's governance and accountability structures.

'At several points we walked out or threatened to walk out,' said Kohm. 'It was contentious, but it was professional and adult.'

Neither Zuckerberg nor COO Sheryl Sandberg were deposed as a part of the investigation, Kohm said. But, he added, the Justice Department interviewed roughly two dozen company officials, including some senior officials, and provided notes to the FTC.

The final settlement stretched on for 20 pages, said Kohm, and 'every single word was negotiated.'

For more than a year, Facebook — once the darling of policymakers and a celebrated example of American ingenuity — has lurched from crisis to crisis.

This past October, for example, Facebook disclosed that hackers had compromised tens of millions of accounts by exploiting a series of software flaws, culminating in their ability to impersonate users and take over their profiles.

The following month, Facebook acknowledged that its platform had been abused in Myanmar to 'foment division and incite violence,' citing a human rights review of Facebook that the company had commissioned. Facebook at the time said it agreed with the independent report and that 'we can and should do more.'

Critics have repeatedly pointed to Facebook's role in spreading misinformation, hate speech and conspiracy theories on its platforms. The company came under fire in March when reports showed that Facebook's search tool was recommending anti-vaccination groups and pages to users of the platform. Facebook published a blog post saying it was developing new policies to handle the issue, but the misinformation persisted even after the new initiative began.

That same month, Facebook faced renewed criticism over its content moderation efforts when a Facebook Live video that appeared to show a gunman massacring worshipers in Christchurch, New Zealand, threatened to spiral out of control. Though Facebook shut down the attacker's account and scrubbed more than a million instances of the video from its services, the company struggled to contain the viral content.

With Wednesday's announcement, the FTC sought to demonstrate its resolve as the nation's top privacy cop, attempting to show it is a robust and credible enforcer at a time when tech dominates nearly all aspects of modern life, from advertising to communications and entertainment.

Over more than a year, the FTC investigation gained increasing significance as a test of Washington's commitment and ability to regulate Silicon Valley. It marked a sharp divergence from the Obama era, when Silicon Valley engineers and entrepreneurs were frequent White House visitors and, in many cases, filled key administration posts. Now, at a time when technology companies are under heightened scrutiny from Congress and on the receiving end of President Trump's social media jabs, analysts say the FTC was under pressure to seek a tough deal from Facebook.

But the settlement, which must still be approved by a judge, proved much weaker than some commissioners had hoped. Chopra and Slaughter both said the far-reaching consequences of Facebook's missteps called for more aggressive action.

The federal government should have taken Facebook to court to deter it from violating the law in the future, Slaughter wrote in her dissent.

'Litigation would have provided public transparency and accountability for the company, its leaders, and the Commission,' she wrote. 'It would send a message to the market and the public that the Commission is willing to go to the mat to ensure compliance with its orders.'

The settlement does not require Facebook to spin off Instagram and WhatsApp; antitrust experts have said that a breakup proceeding would likely require a separate lawsuit alleging that Facebook violated the nation's competition laws, as opposed to a prior settlement order.

Simons acknowledged some of the agency's constraints on Monday as he announced a multi-million-dollar settlement with the credit reporting agency Equifax over its 2017 data breach. In a press briefing, Simons said the FTC did not slap Equifax with a fine because the commission lacks the power to seek those penalties on a first offense.

FTC proponents have also said the agency needs more resources to better serve as an effective regulator. In 2018, the FTC reported a total budget of roughly $350 million — about two percent of Facebook's reported revenue in the first quarter of 2019.

Separately, the FTC said Tuesday it had brought complaints against — and reached settlements with — Cambridge Analytica, its former CEO Alexander Nix, and app developer Aleksandr Kogan for their alleged roles in misusing Facebook user data. The settlements will limit the ability of Nix and Kogan to 'conduct any business in the future,' the FTC said.

The FTC announcements this week may add pressure on Congress to give the agency more power or to develop a national privacy law, some analysts said.

'There's a need and a demand for legislation irrespective of this [Facebook] settlement,' said Hal Singer, an economist at George Washington University's Institute of Public Policy.

Such a bill could have far-reaching effects, potentially touching every corner of the economy as technology increasingly finds its way into new areas. But progress on the legislation has been slow, and many policy experts privately say they increasingly doubt a bill can be passed this year.

Facebook faced sharp questioning from Congress last week as a key panel on the House Judiciary Committee continued a 'top-to-bottom' antitrust review of the tech industry. Lawmakers on other committees scrutinized Facebook's plans to launch a digital currency, Libra, with many arguing Facebook must reform itself before trying to disrupt the global financial system.

Even some of Facebook's earliest investors have questioned the platform's effects on society as it has become a vital communications tool for billions of people. Facebook co-founder Chris Hughes this year publicly repudiated the product he helped build, writing a New York Times op-ed arguing that his co-founder, CEO Mark Zuckerberg, has built a monopoly business that stifles competition, and urging regulators to break up the company.

The 'techlash,' as some observers have come to call it, is a remarkable break from recent history — particularly for many Democrats who otherwise share close ties culturally and financially with Silicon Valley. For the tech industry, it represents a dramatic shift in attitudes about its role in civil society.

'These questions of trust and privacy are not limited to Google and Facebook,' said Todd McKinnon, CEO of the cloud services company Okta. 'If you're a laundromat and you have a mobile app that gets your customers in there, you're a tech company — so the techlash is going to affect your laundromat. It sounds funny, but it's true.'

Meanwhile on the campaign trail, presidential candidates such as Sens. Elizabeth Warren (D-Mass.) and Bernie Sanders (I-Vt.) have criticized tech giants for being overly powerful and part of a larger wave of corporate concentration that must be beaten back. In March, Warren unveiled a campaign proposal that would all but dismantle giants such as Amazon, Facebook and Google. Sen. Amy Klobuchar, another 2020 Democratic contender, has said the tech industry has contributed to a 'major monopoly problem' in the United States.

Facebook has claimed that a breakup would make it harder, not easier, to address problems such as disinformation and hate speech, and that over-regulation risks giving foreign tech companies an edge.

Republicans such as Sen. Marsha Blackburn (R-Tenn.) have also called for greater limits on tech companies. In a recent speech before the U.S. Chamber of Commerce, Blackburn said it is too early to consider breaking up large tech platforms, but that companies such as Facebook have shown they can no longer regulate themselves.

Wednesday's settlement, however, isn't likely to deter states that are taking their own close look at Silicon Valley.

Multiple state attorneys general have suggested they could pile on with their own investigations or lawsuits against the tech industry. In December, Karl Racine, attorney general for the District of Columbia, became the first when his office sued Facebook over the Cambridge Analytica debacle.

And the FTC itself could open additional investigations, said Harold Feld, a senior vice president at the consumer group Public Knowledge. A recently established task force charged with reviewing past tech mergers could, for example, seek to determine whether Facebook's acquisition of WhatsApp or Instagram proved harmful to competition.

'It's very clear that the settlement is not the end of the game,' said Feld.

Terre Haute
Broken Clouds
53° wxIcon
Hi: 64° Lo: 48°
Feels Like: 53°
Robinson
Clear
51° wxIcon
Hi: 61° Lo: 46°
Feels Like: 51°
Indianapolis
Broken Clouds
51° wxIcon
Hi: 63° Lo: 46°
Feels Like: 51°
Rockville
Clear
46° wxIcon
Hi: 63° Lo: 47°
Feels Like: 46°
Casey
Scattered Clouds
52° wxIcon
Hi: 61° Lo: 48°
Feels Like: 52°
Brazil
Broken Clouds
53° wxIcon
Hi: 63° Lo: 46°
Feels Like: 53°
Marshall
Broken Clouds
53° wxIcon
Hi: 63° Lo: 47°
Feels Like: 53°
Breezy, warmer Wednesday
WTHI Planner
WTHI Temps
WTHI Radar

WTHI Events

 

Illinois Coronavirus Cases

(Widget updates once daily at 7 p.m. CT)

Confirmed Cases: 292082

Reported Deaths: 8858
CountyConfirmedDeaths
Cook1443155217
DuPage17589561
Lake16953487
Will14045378
Kane13159326
St. Clair6665190
Winnebago6037149
Madison5760137
Champaign473320
McHenry4609118
Peoria351050
McLean329523
Rock Island302676
Kankakee275277
Unassigned2532244
Sangamon243245
Kendall202025
Tazewell178025
LaSalle172557
DeKalb159038
Macon156044
Coles147231
Williamson140645
Jackson126224
Clinton119020
Adams114910
Boone112823
Randolph94111
Effingham8722
Vermilion7914
Whiteside75320
Ogle7286
Monroe68016
Knox6723
Grundy6705
Henry6665
Morgan66223
Bureau65211
Jefferson62038
Marion5661
Christian55411
Macoupin5507
Franklin5413
Stephenson5296
Union51524
McDonough48215
Logan4681
Crawford4584
Woodford4266
Fayette4183
Livingston4036
Cass39811
Jersey39415
Shelby3944
Lee3831
Montgomery37613
Iroquois36719
Perry35315
Saline3464
Warren3332
Bond3305
Douglas3147
Wayne2805
Jo Daviess2662
Lawrence2592
Carroll2355
Greene22911
Cumberland2185
Hancock2183
Moultrie2183
Washington2161
Jasper2139
Richland2136
Pulaski1811
Fulton1780
Clark1742
White1690
Wabash1583
Clay1560
Johnson1560
Mason1531
Mercer1405
Piatt1390
Pike1341
De Witt1252
Menard1251
Edgar1138
Massac1132
Ford1055
Marshall1050
Alexander831
Scott790
Gallatin732
Hamilton712
Henderson690
Edwards640
Brown620
Calhoun600
Putnam570
Stark552
Schuyler500
Hardin400
Pope291
Out of IL20

Indiana Coronavirus Cases

(Widget updates once daily at 8 p.m. ET)

Confirmed Cases: 118322

Reported Deaths: 3591
CountyConfirmedDeaths
Marion21502767
Lake10688323
Elkhart6707111
St. Joseph6619113
Allen6330205
Hamilton4938109
Vanderburgh378131
Hendricks2766124
Monroe265536
Tippecanoe256613
Johnson2352124
Clark225957
Porter219947
Delaware200162
Cass19559
Vigo186827
Madison170375
LaPorte149141
Floyd139664
Warrick138242
Howard132663
Kosciusko125917
Bartholomew118457
Marshall101524
Dubois99919
Boone99146
Grant95134
Hancock94643
Noble93132
Henry81226
Jackson7739
Wayne77014
Morgan73438
Daviess68028
Shelby68029
Dearborn67528
LaGrange64011
Clinton62314
Harrison59224
Putnam58411
Gibson5355
Knox5289
Lawrence51629
Montgomery51121
DeKalb48811
White48714
Decatur45939
Miami4394
Greene42735
Fayette42313
Jasper4012
Scott39011
Steuben3907
Posey3460
Sullivan33812
Jennings31612
Franklin31325
Clay3085
Ripley3078
Orange28824
Whitley2826
Carroll27813
Adams2763
Wabash2728
Starke2717
Washington2701
Wells2674
Spencer2633
Jefferson2503
Huntington2473
Fulton2442
Tipton22822
Randolph2238
Perry22113
Jay1920
Newton17411
Owen1711
Martin1680
Pike1641
Rush1574
Vermillion1310
Fountain1292
Blackford1213
Pulaski1141
Crawford1100
Parke1072
Brown1043
Benton870
Ohio797
Union790
Switzerland690
Warren411
Unassigned0226