Facebook’s FTC settlement includes the largest fine ever levied for data privacy violations, and an unprecedented remedial order that mandates a board-level privacy committee and heightened privacy requirements, among other things. We look at how this monumental resolution, which had strong dissents from two FTC Commissioners, is shaping the data privacy enforcement climate, the specific obligations in the order and compliance takeaways. In a future article, we will examine the social media giant’s $100-million SEC settlement based on allegations that it was misleading in its public disclosures about improper use of data. See “Learning From the Equifax Settlement” (Jul. 31, 2019).