
Costs
How to trace Facebook FTC settlement history in USD
Facebook FTC settlement history spans a 2012 consent order with no penalty and the $5 billion penalty of 2019. Here is what a compliance budget should hold.
What to take away
- The dollars in Facebook FTC settlement history start at zero in the 2012 consent order and reach the $5 billion penalty announced on July 24, 2019.
- Recurring costs outlast the headline. Assessments, certifications and recordkeeping run for the life of the order.
- Budget the program, not the fine. Regulators set the penalty; your team sets the run rate.
- Pull every figure from FTC primary documents, because summaries drop dates and scope.
What the range covers
The FTC case file for the 2012 matter lists a twenty-year consent order with no civil penalty (2012 case page). The order announced on July 24, 2019 added a $5 billion penalty, a board-level privacy committee, third-party assessments on a two-year cycle and quarterly certifications from the chief executive (2019 press release).
To trace that history in order:
- Read the 2012 order text on the FTC case page before any coverage of it.
- Read the 2019 press release and list each new obligation with its date.
- Turn each obligation into a budget line with an owner and a review interval.
Those duties rest on a longer pattern, and early social networks shows how earlier platforms handled comparable obligations. For a US company under a similar order, the run rate is the number that matters. Across one assessment cycle, the illustrative lines below total between 250,000 and 1.6 million USD, penalty excluded.
Line by line
Each obligation becomes a cost line. The ranges are illustrative for a mid-size US platform and cover one assessment cycle.
Show the numbers
| Outside privacy counsel and order review | 15,000–45,000 |
|---|---|
| Records and data mapping rebuild | 40,000–200,000 |
| Independent third-party assessment | 75,000–300,000 |
| Board reporting and certification cycle | 20,000–60,000 |
| Consumer notice and redress program | 100,000–1,000,000 |
One-off lines buy readiness: a legal read of the order, a data map, a notice. They are paid once and then stop. Recurring lines buy proof, in every period the order names, that the controls still hold. That split is the whole budget.
Fixed against variable
Fixed spend arrives whether or not an audit finds anything. It covers the counsel retainer, the assessment window, the certification calendar and records retention. Variable spend tracks the estate: how many systems hold consumer data, how tangled the mapping is, how many findings need repair, how large the notice pool is. Readers who want the argument behind the rules rather than the invoice can begin with Critiques of social media, which sets out the claims regulators keep returning to.
Example: three-year plan for a mid-size ad tech firm
Year one carries the one-off load of counsel, data mapping and the first assessment. Years two and three carry the recurring lines alone. When an assessment opens a remediation gap, the repair arrives as a new one-off line in the following year. That one event moves a plan from the floor of the range to the ceiling.
A consent order is an operating manual with a legal team attached. The fine is the entry fee; the manual is the rent.
What the tools do not include
The ranges leave out the penalty, state attorney general actions, engineering hours, executive time and a second assessment cycle. They also leave out the cost of scope you have not mapped yet. Scope follows platform type, and Internet communities comparison sets out how duties differ across a feed, a forum and a messaging app. For federal expectations that touch your own products, the FTC's business guidance is a cheaper first stop than a consultant's opening deck (FTC privacy and security guidance).
Where budgets leak
Leaks rarely come from the headline lines. They come from the routine ones:
- Records requests answered by hand, one custodian at a time
- Assessment window booked late, at a premium
- Findings left open past the date written into the order
- Notice wording rewritten three times by three teams
Leaks also start when leadership cannot say what the platform does well, which makes every compliance ask look like pure cost. Benefits of social media offers six tests for that claim and a way to state the trade-off before the budget meeting.
Common questions
Do I need both the 2012 and 2019 documents? Yes. The later order amends the earlier one, so the obligations are read together, and the FTC case page keeps both.
Is the $5 billion part of a compliance budget? No. Treat it as an uninsurable exposure and keep the budget focused on the program costs above.
What is the cheapest defensible starting point? Counsel review of the order plus a data map. Those two lines sit at the bottom of the range shown earlier.
How current are these figures? Each line above is dated to the obligation it serves, and each carries a range rather than a single number, because data volume drives the total.







