TOPSHOT - One hundred cardboard cutouts of Facebook founder and CEO Mark Zuckerberg stand outside the US Capitol in Washington, DC, April 10, 2018. - Advocacy group Avaaz is calling attention to what the groups says are hundreds of millions of fake accounts still spreading disinformation on Facebook. (Photo by SAUL LOEB / AFP)        (Photo credit should read SAUL LOEB/AFP/Getty Images)
SAUL LOEB/AFP/AFP/Getty Images
TOPSHOT - One hundred cardboard cutouts of Facebook founder and CEO Mark Zuckerberg stand outside the US Capitol in Washington, DC, April 10, 2018. - Advocacy group Avaaz is calling attention to what the groups says are hundreds of millions of fake accounts still spreading disinformation on Facebook. (Photo by SAUL LOEB / AFP) (Photo credit should read SAUL LOEB/AFP/Getty Images)
Now playing
03:55
Facebook's data scandals aren't just bad publicity
Facebook
Getty Images
Facebook
Now playing
03:14
More than 500 million Facebook users' personal data leaked online
Energy and Commerce Committee/YouTube
Now playing
02:50
US lawmakers question tech CEOs on misinformation
TOPSHOT - A demonstrator wearing a mask painted with the colours of the flag of East Turkestan and a hand bearing the colours of the Chinese flag attends a protest of supporters of the mostly Muslim Uighur minority and Turkish nationalists to denounce China's treatment of ethnic Uighur Muslims during a deadly riot in July 2009 in Urumqi, in front of the Chinese consulate in Istanbul, on July 5, 2018. - Nearly 200 people died during a series of violent riots that broke out on July 5, 2009 over several days in Urumqi, the capital city of the Xinjiang Uyghur Autonomous Region, in northwestern China, between Uyghurs and Han people. (Photo by OZAN KOSE / AFP)        (Photo credit should read OZAN KOSE/AFP/Getty Images)
OZAN KOSE/AFP/AFP/Getty Images
TOPSHOT - A demonstrator wearing a mask painted with the colours of the flag of East Turkestan and a hand bearing the colours of the Chinese flag attends a protest of supporters of the mostly Muslim Uighur minority and Turkish nationalists to denounce China's treatment of ethnic Uighur Muslims during a deadly riot in July 2009 in Urumqi, in front of the Chinese consulate in Istanbul, on July 5, 2018. - Nearly 200 people died during a series of violent riots that broke out on July 5, 2009 over several days in Urumqi, the capital city of the Xinjiang Uyghur Autonomous Region, in northwestern China, between Uyghurs and Han people. (Photo by OZAN KOSE / AFP) (Photo credit should read OZAN KOSE/AFP/Getty Images)
Now playing
01:16
Facebook: Chinese hackers targeted Uyghurs living in US
A Facebook employee walks by a sign displaying the "like" sign at Facebook's corporate headquarters campus in Menlo Park, California, on October 23, 2019. (Photo by Josh Edelson / AFP) (Photo by JOSH EDELSON/AFP via Getty Images)
Josh Edelson/AFP/Getty Images
A Facebook employee walks by a sign displaying the "like" sign at Facebook's corporate headquarters campus in Menlo Park, California, on October 23, 2019. (Photo by Josh Edelson / AFP) (Photo by JOSH EDELSON/AFP via Getty Images)
Now playing
02:36
Facebook to restore news in Australia
Chris, a Trump supporter, reacts to a fact check of a manipulated video shared by the Trump campaign.
CNN
Chris, a Trump supporter, reacts to a fact check of a manipulated video shared by the Trump campaign.
Now playing
03:58
What Trump supporters see on their Facebook feeds
CNN
Now playing
02:03
Watch this former exec compare Facebook to Big Tobacco
Screengrab Nick Clegg facebook
CNN
Screengrab Nick Clegg facebook
Now playing
07:34
Facebook exec explains the company's US election actions
Getty Images
Now playing
05:15
Misleading videos shared by Republicans get millions of views
Now playing
02:24
Under questioning, Zuckerberg admits Instagram was a 'competitor'
Now playing
03:31
Congresswoman grills Facebook CEO on copying competitors
From Facebook
Now playing
02:40
Zuckerberg blasts Trump administration for worsening pandemic
Glenn Chapman/AFP/Getty Images/CNN
Now playing
03:38
He says Facebook's Libra is the future. Lawmakers aren't so sure
YouTube/Financial Services Committee
Now playing
02:15
Zuckerberg struggles to explain whether Facebook fact checks political ads
Facebook's CEO Mark Zuckerberg delivers his speech during the VivaTech (Viva Technology) trade fair in Paris, on May 24, 2018. (Photo by GERARD JULIEN / AFP)        (Photo credit should read GERARD JULIEN/AFP/Getty Images)
GERARD JULIEN/AFP/Getty Images
Facebook's CEO Mark Zuckerberg delivers his speech during the VivaTech (Viva Technology) trade fair in Paris, on May 24, 2018. (Photo by GERARD JULIEN / AFP) (Photo credit should read GERARD JULIEN/AFP/Getty Images)
Now playing
03:21
This is how Facebook kills its competition
facebook zuckerberg origin business orig _00011530.jpg
facebook zuckerberg origin business orig _00011530.jpg
Now playing
01:47
It took Facebook 15 years to take over the world. Here's how
(CNN Business) —  

Facebook could face additional scrutiny from federal regulators after a new report that it offered more of its users’ data to companies than it had previously admitted.

The New York Times reported late Tuesday that Facebook shared user data with more than 150 companies, including several large technology firms, citing internal Facebook documents. Bing, Microsoft’s search engine, was allowed to “see the names of virtually all Facebook users’ friends without consent,” according to the report, while Netflix and Spotify were given access to the private messages of Facebook users.

The data sharing arrangements may have violated a 2011 consent agreement between Facebook and the Federal Trade Commission, former FTC officials and antitrust experts told CNN Business. The original agreement required Facebook to have a “comprehensive privacy program” and to get the “express consent” of users before sharing their data,

“The behavior described here is certainly inconsistent with that commitment,” William Kovacic, FTC chairman under President George W. Bush, told CNN Business.

Facebook, for its part, pushed back at this assertion. “None of these partnerships or features gave companies access to information without people’s permission, nor did they violate our 2012 settlement with the FTC,” Konstantinos Papamiltiadis, Facebook’s director of developer platforms and programs, wrote in a blog post Tuesday in response to the Times’ report.

Facebook told the Times that the 2011 FTC agreement didn’t require it to have explicit consent for sharing user data with these partners’ platforms because Facebook considered them to be extensions of its social network, where users engage with their Facebook contacts.

Kovacic noted there could be some difference in how the company and the agency interpret the obligations agreed to in a consent order, but what ultimately matters is whether FTC officials believe the company has run afoul of the agreement and how aggressively they act.

Facebook stock was down more than 6% in midday trading Wednesday following the report.

In the wake of Facebook’s Cambridge Analytica scandal earlier this year, the FTC confirmed it had an open investigation into the company’s data privacy practices. As the privacy scandals have continued to pile up, some former FTC officials now suggest Facebook may have violated the consent decree multiple times.

“I don’t think there’s any doubt that Facebook violated the consent decree. I think the question is, you know, how many violations there are,” said David Vladeck, the director of the FTC’s Bureau of Consumer Protection from 2009 to 2012. “I think there may be fresh violations.”

A spokesperson for the FTC declined to comment for this story.

If the FTC does believe Facebook violated the agreement, the company could face a “stupendous fine” from the agency, according to Kovacic, potentially totaling in the billions. Others, like Ashkan Soltani, a former chief technologist at the FTC, think it’s more likely the fine would be in the $500 million to $1 billion range.

As Soltani points out, FTC fines are more often in the millions, not the billions. While a fine of hundreds of millions of dollars would certainly be a blow to Facebook, it would not cripple the company, which made more than $5 billion in profit in the three months ending in September.

But a large fine levied against the company is only one of the FTC’s levers.

Sally Hubbard, a former assistant attorney general in the New York state Attorney General’s antitrust bureau, said the FTC could use the threat of taking Facebook to court as leverage to push the company into a stricter privacy agreement. It could also go after individual Facebook executives with fines.

“A lot of it will be based on the political will of the agency, in terms of whether they want to see this matter closed,” Soltani said. In the past, he said, “a lot of the FTC settlements were not that strong.”

But this time could be different. “This has emerged as a powerful test of the FTC’s credibility as a privacy data protection authority,” Kovacic said. “If it seems to conclude this in a way that is weak, it will suffer tremendously.”