The deal would require Facebook to allow independent audits of its data security practices for five years.
In a six-page ruling, U.S. District Court Judge William Alsup wrote, “This proposal provides the primary injunctive goal of this suit: elimination of the vulnerability and Facebook’s commitment to security measures to protect not just class members but all Facebook users’ personal information.”