“Recently, though, former FTC officials have said that Facebook’s entanglement with Cambridge Analytica may have violated the company’s legal agreement with the federal watchdog agency. Whistleblowers in recent days contend that Cambridge Analytica collected information about users and their friends under a since-ceased policy governing third-party apps on Facebook – then kept that data even after Facebook asked that it be deleted.
About 270,000 users downloaded Cambridge Analytica’s app. But the firm was able to obtain personal information about their friends, who likely had no knowledge that their data was being collected. Roughly 50 million people may have been affected.
If the FTC ultimately finds that Facebook broke that agreement, it could fine the company $40,000 for each violation.”
More on this at MetaFilter : Six Degrees Of Surveillance.