The Australian Information Commissioner has announced an A$50 million ($31.85 million) enforceable undertaking with Meta Platforms, Inc., the parent company of Facebook, to settle civil penalty proceedings. The settlement addresses the privacy concerns stemming from the Cambridge Analytica scandal, marking the largest payout of its kind in Australia.
The enforceable undertaking follows a court-ordered mediation process that began in February 2024, culminating in the withdrawal of civil penalty proceedings initiated by the Commissioner in March 2020. Meta agreed to cover the Commissioner’s legal costs as part of the settlement.
The Commissioner alleged that the personal information of Australian Facebook users was improperly disclosed to the controversial app This is Your Digital Life between November 2013 and December 2015. The app’s data practices exposed users to the risk of their information being accessed by third parties, including Cambridge Analytica, potentially for political profiling purposes.
These actions were deemed a breach of Australia’s Privacy Act 1988.
“Today’s settlement represents the largest ever payment dedicated to addressing concerns about the privacy of individuals in Australia,” said Elizabeth Tydd, Australian Information Commissioner.
![](https://candid.technology/wp-content/uploads/2024/04/Meta-fb-oculus-workspace-whatsapp-messenger-instagram-1024x682.jpg)
Meta will establish a $50 million payment scheme for affected Australian Facebook users as part of the settlement. The scheme, overseen by an independent third-party administrator to be appointed by Meta, will open in the second quarter of 2025.
The eligibility criteria include:
- Holding a Facebook account between November 2, 2013, and December 17, 2015.
- Being present in Australia for more than 30 days during this period.
- Either installed the This is Your Life app or were friends on Facebook with someone who did.
Eligible individuals could apply for one of the two payment tiers:
- Base payment: For generalised concerns or embarrassment caused by the breach.
- Specific payment: Those who can demonstrate loss or damage from the privacy breach.
Cambridge Analytica was a British consulting firm that collected data of millions of Facebook users without their consent. A Meta spokesperson told Reuters that the company settled the Australian lawsuit on a no-admission basis, meaning Meta does not agree with the allegations against them.
In the News: Texas Tech Health Sciences Centers hacked; 2M+ files exposed