Facebook Privacy Settlement: What You Need to Know

In December 2022, Meta agreed to pay $725 million to settle a class action lawsuit alleging that Facebook improperly allowed Cambridge Analytica and other third parties to access the private data of Facebook users without their knowledge or consent. This settlement was described at the time as the largest privacy class action settlement in U.S. history.

The class was defined as U.S. Facebook users who had accounts between May 24, 2007 and December 22, 2022. Eligible class members could submit claims through a settlement claims process administered by the settlement administrator. The claim submission deadline passed in 2023. Payments to eligible claimants varied based on the number of valid claims submitted — settlement amounts in large consumer class actions are typically divided among all eligible claimants, resulting in individual payments that may be modest.

If you were an eligible U.S. Facebook user during the covered period and did not submit a claim before the deadline, you were likely unable to receive a payment from this particular settlement. Settlement deadlines in class actions are firm — courts generally do not extend them for late claimants. If you received a settlement payment in a prior tax year and are uncertain how to report it, an IRS transcript of your past returns can help you verify what was filed. You can verify the status of any class action settlement through the federal court's PACER system or through the FTC's website.

In 2019, the Federal Trade Commission (FTC) reached a $5 billion settlement with Facebook — at the time the largest penalty the FTC had ever imposed — over allegations that Facebook violated a 2012 consent order related to its privacy practices, including practices connected to Cambridge Analytica. This was a regulatory enforcement action between the government and Facebook, not a consumer class action. As a result, individual consumers did not receive payments from this settlement — the penalty was paid to the U.S. Treasury.

The consent order also imposed behavioral requirements on Facebook, including enhanced privacy oversight and restrictions on how Facebook may use and share user data. The FTC publishes the full text of the consent order and subsequent modifications on its website. Understanding how major tech company lawsuits and settlements work can give you useful context for following these proceedings. If you receive a settlement payment, be aware that it may constitute taxable income that affects your effective tax rate.

A separate Facebook privacy settlement arose under the Illinois Biometric Information Privacy Act (BIPA). Illinois residents were subject to a $650 million class action settlement — later adjusted — related to Facebook's face-tagging feature, which plaintiffs alleged collected biometric data without proper consent under Illinois law. This was a state-level action limited to Illinois Facebook users. The settlement administrator distributed payments to eligible Illinois claimants who submitted timely claims.

The Illinois BIPA is considered one of the most protective biometric privacy laws in the United States, as it provides a private right of action for individuals whose biometric data is mishandled. Other states have enacted or are considering similar biometric privacy laws, which may create additional enforcement actions over time. The FTC tracks privacy enforcement trends at the federal level.

The Facebook privacy settlements reflect broader regulatory attention to how large technology platforms collect, share, and profit from user data. As a consumer, these cases underscore the importance of reviewing privacy settings on social media platforms and understanding how your data may be shared with third parties.

The FTC publishes consumer guidance on online privacy, data security rights, and how to protect your personal information from misuse. Consumers can report privacy concerns involving social media platforms to the FTC at ReportFraud.ftc.gov. State attorneys general also have authority to investigate privacy violations under state consumer protection laws. Understanding how tax identity theft occurs is a related privacy concern worth understanding. If your financial data was exposed, consider reviewing how to address credit report issues that may result from fraudulent use of your identity, and learn how to remove late payments from your credit report if fraudulent activity caused missed payments.

Large class action settlements often generate impersonation scams in which fraudsters contact consumers claiming they are owed settlement money and asking for personal information or a fee to "process" the payment. The FTC warns that legitimate class action settlement administrators do not ask for fees or sensitive financial account information to send you a payment.

If you receive an unsolicited communication claiming you are owed money from a Facebook privacy settlement, verify the claim through the official settlement administrator's website (which would have been publicly disclosed in court documents) or through a reputable legal news source. You can also search for the settlement through PACER, the federal court's public records system at pacer.uscourts.gov, or through FTC.gov for enforcement actions. Protecting yourself from scams also means understanding how to recover money if you're scammed.