The settlement covers a complaint that Twitter deceptively used members’ email addresses and phone numbers for targeted advertising. Twitter must also accept audits of its data privacy program among other restrictions.

The legal filing claims that Twitter misrepresented its policies to users between 2013 and 2019. The company apologized for the practice in 2019, saying it’inadvertently’ funneled the addresses and numbers into its ad system.

The FTC took aim at Facebook for a similar practice in 2019. It fined the company $ 5 billion for that and other privacy violations.

New compliance measures will require Twitter to maintain a’comprehensive’ privacy and information security program. It must also notify anyone who joined Twitter before September 2019 of the settlement after a federal court approves it.