The largest data privacy penalty in history was a $5 billion fine imposed on Meta (Facebook) by the FTC in 2019 following the Cambridge Analytica scandal, with Meta also receiving the largest GDPR fine of €1.2 billion (about $1.3 billion) in 2023 for unlawful EU-US data transfers.