Facebook agrees to $100 million SEC settlement after privacy probe

That's in addition to the record $5 billion the social network has to pay the FTC over its handling of user data.

Jennifer Bisset Former Senior Editor / Culture
Jennifer Bisset was a senior editor for CNET. She covered film and TV news and reviews. The movie that inspired her to want a career in film is Lost in Translation. She won Best New Journalist in 2019 at the Australian IT Journalism Awards.
Expertise Film and TV Credentials
  • Best New Journalist 2019 Australian IT Journalism Awards
Sean Keane Former Senior Writer
Sean knows far too much about Marvel, DC and Star Wars, and poured this knowledge into recaps and explainers on CNET. He also worked on breaking news, with a passion for tech, video game and culture.
Expertise Culture | Video Games | Breaking News
Jennifer Bisset
Sean Keane
2 min read
Mark Zuckerberg - Washington, DC

Facebook CEO and co-founder Mark Zuckerberg appeared at a congressional hearing in Washington, DC, in April 2018. 

Matt McClain/The Washington Post via Getty Images

The Securities Exchange Commission announced Wednesday that it'll fine  Facebook  $100 million as part of a settlement in relation to a probe into the social network's handling of users' data. The investor protection agency alleged that Facebook's public disclosures didn't offer sufficient warning that developers and other third parties, who in obtaining user data, may have violated the social network's policies or failed to gain user permission. 

It said that Facebook "presented the risk of misuse of user data as merely hypothetical," when it knew that the data had actually been misused.

The SEC, along with the Federal Trade Commission and other federal agencies, began probing Facebook in July 2018 following Facebook's disclosures in March 2018 that Cambridge Analytica, a digital consultancy that had ties to the Trump presidential campaign, improperly accessed personal information of up to 87 million of the social network's users.

"Public companies must accurately describe the material risks to their business," said Stephanie Avakian, co-director of the SEC's enforcement division. "As alleged in our complaint, Facebook presented the risk of misuse of user data as hypothetical when they knew user data had in fact been misused. Public companies must have procedures in place to make accurate disclosures about material business risks."

Facebook's general counsel, Colin Stretch, wrote that the social network shares the SEC's interest in transparency, and noted that it's updated its disclosures and controls accordingly.

The FTC also unveiled its $5 billion settlement with Facebook on Wednesday over the Cambridge Analytica scandal. 

Facebook said the agreement "will mark a sharper turn toward privacy, on a different scale than anything we've done in the past," while CEO Mark Zuckerberg said in a separate statement that the social network would make "major structural changes" to how it builds products and conducts business.

The broad strokes of the FTC settlement have been rumored for months and Facebook has already set aside the money to pay the fine, the largest the agency has levied against a tech company. In 2012, the FTC fined Google a record-setting $22.5 million.

Originally published July 23.
Update, July 24: Adds Zuckerberg statement.