Will the FTC come down hard on Facebook? It's only happened twice in 20 years

If Facebook has to pay a  Federal Trade Commission penalty for the Cambridge Analytica data scandal, it will join a very short list of companies to have done so. Of 91 cases involving online privacy issues the Federal Trade Commission has brought since the first in 1998, just two companies have paid civil penalties specifically for violating adult users' privacy. They are Google, which paid $22.5 million in 2012 and Upromise, which paid $500,000 in 2017. The numbers aren't surprising to experts because of the constraints on the FTC when it comes to policing consumers' privacy rights.