Meta Pays $725M To Settle Facebook Privacy Suit

Facebook’s corporate parent company Meta has agreed to pay $725 million to settle a long-running lawsuit that accused the social network of allowing third parties, including Cambridge Analytica, to access users' private data and support Donald Trump’s Presidential campaign.

The settlement is the largest recovery ever for a data privacy class action lawsuit and is the most Facebook has ever paid out to settle a private class action. Facebook has not admitted to any wrong action as part of the settlement.

In August, the social media giant had reportedly reached a preliminary agreement regarding the lawsuit, however, the terms and amount were kept private until now. 

Plaintiffs alleged that Facebook “granted numerous third parties access to their Facebook content and information without their consent, and that Facebook failed to adequately monitor the third parties’ access to, and use of, that information,” according to the law firm behind the lawsuit.

The lawsuit was initiated in 2018, when Facebook was accused of violating privacy rules by sharing data with third parties. The information was ultimately accused of being used to steer US voters in favor of Donald Trump in the 2016 elections. The case was subsequently broadened to focus on Facebook’s overall data-sharing practices which focused on Cambridge Analytica, which has since shut down, which collected and exploited the personal data of 87 million Facebook users without their consent. That information was allegedly used to develop software to steer US voters in support of Trump.

Facebook has not admitted any wrongdoing as part of the settlement, which still requires approval by a judge in the San Francisco division of the US District Court. "We pursued a settlement as it's in the best interest of our community and shareholders... Over the last three years we revamped our approach to privacy and implemented a comprehensive privacy program." Meta said in a statement.

Besides the class action settlement, Facebook has agreed to pay $5 billion to the U.S. Federal Trade Commission following the scandal. In response to a similar inquiry, Facebook has also paid $100 million to the U.S. Securities and Exchange Commission. Both cases arose because the company had previously agreed to inform users when their data was being shared with third parties. FTC and SEC findings alleged that Facebook either failed to do so or allegedly used misleading tactics.

Facebook has since removed access to its data from thousands of apps suspected of abusing it, restricted the amount of information available to developers, and made it easier for users to calibrate restrictions on personal data sharing.

Last year, Meta paid US Federal authorities a fine $90m in settlement after Facebook kept tracking users' internet activity after they'd logged off from the platform.

PBS:    CNBC:     Oodaloop:      Security Week:      Telegraph:    Screenrant:  

You Might Also Read:

EU & US Agree New Data Rules To Replace Privacy Shield:

 

« Looking Back - Top 10 Most Read Articles Of 2022
2023 Tech Predictions »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

InfoSec People

InfoSec People

InfoSec People is a boutique cyber and technology recruitment consultancy, built by genuine experts.

Mellanox Technologies

Mellanox Technologies

Mellanox Technologies is a leading supplier of end-to-end Ethernet and InfiniBand intelligent interconnect solutions and services for servers, storage, and hyper-converged infrastructure.

UZCERT

UZCERT

UZCERT is the national Computer Emergency Response Team for Uzbekistan.

Dice

Dice

Dice is a leading recruitment platform, helping technology professionals manage their careers and employers connect with highly skilled tech talent in specialist areas including cybersecurity.

Extreme Protocol Solutions (EPS)

Extreme Protocol Solutions (EPS)

Extreme Protocol Solutions is an industry leading Data Sanitization Software, Hardware and Onsite Service Provider.

Lifespan Technology

Lifespan Technology

Lifespan Technology provides the full range of IT Asset Disposition services. This includes hardware recycling and disposal, data destruction, and hardware resale.

Altipeak Security

Altipeak Security

Altipeak Security provide Safewalk - a flexible and robust authentication platform through which we offer improved security to SMBs, corporates, banks, insurance companies, healthcare and more.

Gula Tech Adventures

Gula Tech Adventures

Gula Tech Adventures invests in companies and nonprofits that help close the gap in needed technology and workforce to defend the country in cyberspace.

AirEye

AirEye

AirEye is a leader in Network Airspace Protection (NAP). Block attacks against your corporate network launched from wireless devices in your corporate network airspace.

Wavex Technology

Wavex Technology

Wavex Technology is an award winning IT Services firm offering clients a secure and fully managed IT service.

Core Sentinel

Core Sentinel

Australia's #1 Penetration Testing Service. Make Your Systems Fully Compliant With Our OSCE CREST/CISA Certified Penetration Testing.

EasyDMARC

EasyDMARC

EasyDMARC deliver the most comprehensive product for anyone who strives to build the most secure possible defence system for their email ecosystem.

Hexiosec

Hexiosec

Hexiosec (formerly Red Maple Technologies) is a technical consultancy and product company founded and run by engineers from the UK Intelligence and Defence communities.

CYBHORUS

CYBHORUS

CYBHORUS are a team of Italian cyber security experts, specialized in cyber threat defense and strategic and organizational consulting.

NMi Group

NMi Group

NMi Group is a global pioneer in mission-critical Testing, Inspection, Certification, and Calibration (TICC) services.

Robosoft Technologies

Robosoft Technologies

Robosoft Technologies is a full-service digital transformation partner. We provide end-to-end digital transformation services in areas including cybersecurity.