Ex-FTC officials describe issues FTC may look at in the investigation of Facebook's possible violations of 2011 consent decree, which could lead to huge fines
Context & Ripple Effects
This April 2018 report is the opening move in what became a multi-year enforcement arc: ex-FTC officials laid out how Facebook's handling of user data could constitute violations of its 2011 consent decree, the same agreement commissioners later met to weigh a record fine against. Within months the agency had moved from assessing exposure to negotiating a multi-billion dollar settlement, making this early read on the legal theory the baseline for everything that followed.
What makes the piece durable is that the consent-decree mechanism it describes did not end with the 2019 resolution — FTC staff later examined whether Frances Haugen's documents showed Facebook violating the settlement that produced the $5B fine, turning each decree into the next investigation's foundation.
First-order effects
- Facebook immediately faces an open FTC investigation into whether its privacy practices breached the 2011 consent decree, where each violation can carry its own penalty — the structure behind the eventual record-fine talk.
Second-order effects
- As the probe hardened into settlement talks, sources say FTC staff initially weighed more direct personal liability for Mark Zuckerberg and a larger fine before landing on the $5B deal, raising the stakes for how future decrees are drafted.
Third-order effects
- If the pattern holds, FTC consent decrees function less as final resolutions than as rolling compliance regimes — each settlement becomes the legal hook for the next investigation, as the Haugen-document review shows.
The trend: Platform privacy enforcement is shifting from one-off penalties to consent decrees that compound, with every settlement becoming the predicate for the next, larger case.