Facebook — Enforcement

Executive Summary

Facebook settled FTC charges that it deceived consumers by making public information users had designated as private, giving third-party apps access to nearly all user data regardless of permissions, and failing to keep privacy promises. The consent decree barred deceptive privacy claims, required user consent before changing data-sharing practices, and mandated independent privacy audits for 20 years.