I was the technology lead at Myspace for the Games Platform during the 2011 crackdown by the FTC. We took the FTC filings seriously and spent large amounts of cash and resources to prevent our data from making it to databrokers. Fines are one thing. FTC can shutdown or cripple your business.
I bet if Facebook is found not to take reasonable steps to mitigate issues raised during the 2011 FTC investigation, they'll be forced to do yearly audits of every app on the platform and require KYC(know your customer) process for all app publishers. This will be very costly and we'll probably see the end of the FB graph API except for trusted and highly capitalized partners.
I have not been involved in FTC decisions but I have worked at companies subject to FTC consent decrees. I agree with adrr's comment. The initial fines are not that big a deal; the work required to demonstrate compliance is non-trivial.
I bet if Facebook is found not to take reasonable steps to mitigate issues raised during the 2011 FTC investigation, they'll be forced to do yearly audits of every app on the platform and require KYC(know your customer) process for all app publishers. This will be very costly and we'll probably see the end of the FB graph API except for trusted and highly capitalized partners.