"Traditionally, the FTC will settle these type of cases because proving consent decree violations is difficult, says Woodrow Hartzog, professor of law and computer science at Northeastern University. But this situation with Facebook could be different, he says. "We can learn a lot from watching what happens after FTC reaches the conclusion of its investigation."
In past major privacy incidences, "people get upset and then the company apologizes and everybody goes about their business," Hartzog said. "I don’t know if this is a noxious enough combination of risky data behavior, combined with a radioactive political environment, combined with people getting fed up with the apologies from companies like Facebook or not.""