The Federal Trade Commission has accepted a final settlement with Facebook, initially proposed last year, which requires that all future changes to privacy settings on the social network be made opt-in. Further, the company must undergo biennial privacy audits for the next 20 years from an independent third party.
Since 2009, Facebook has been under investigation by federal authorities and American senators in the wake of a series of incidents involving the sudden change of users' privacy settings, most notably Facebook Beacon, which shut down that same year.
On Friday, FTC commissioners voted 3-1-1 (including one abstention) and said that they would be keeping a close eye on the company.
“Notably, Facebook will be subject to civil penalties of up to $16,000 for each violation of the order,” the commission wrote in a statement. “We intend to monitor closely Facebook’s compliance with the order and will not hesitate to seek civil penalties for any violations.”
In November 2011, in response to the proposed settlement, Facebook’s founder, Mark Zuckerberg wrote that while his company had made mistakes with respect to privacy, that it was resolved to improve.