You can read the text of the consent decree here [1]. Looks like it just generally required them to have a 'privacy program' and to monitor and test their vendo

You can read the text of the consent decree here [1]. Looks like it just generally required them to have a 'privacy program' and to monitor and test their vendors. [1] https://www.ftc.gov/system/files/ftc_gov/pdf/c4365facebookproposedmodifieddecisionandorder.pdf https://www.ftc.gov/system/files/ftc_gov/pdf/c4365facebookpr...