The Federal Trade Commission said the penalty was the largest ever imposed on any company for violating consumers’ privacy and one of the largest penalties ever assessed by the US government for any violation. “Despite repeated promises to its billions of users worldwide that they could control how their personal information is shared, Facebook undermined consumers’ choices,” FTC Chairman Joe Simons said.

“The magnitude of the $5bn penalty and sweeping conduct relief are unprecedented in the history of the FTC. The relief is designed not only to punish future violations but, more importantly, to change Facebook’s entire privacy culture to decrease the likelihood of continued violations.” The agreement establishes an independent privacy committee within Facebook’s board of directors, “removing unfettered control by Facebook’s CEO Mark Zuckerberg over decisions affecting user privacy,” the FTC statement said. Two commissioners of the five-member FTC dissented in the settlement, saying the penalty was insufficient. “The proposed settlement does little to change the business model or practices that led to the recidivism,” FTC commissioner Rohit Chopra said.