Facebook agrees to pay UK fine over Cambridge Analytica scandal while admitting no liability

Facebook will pay a fine of more than $644,000 for its role in the misuse of personal data in the Cambridge Analytica scandal -- though admits to no liability as part of the agreement announced Wednesday.

The UK's Information Commissioner's Office (ICO) slapped the fine, the maximum penalty under the law, on Facebook in October 2018, after conducting an investigation into how Facebook allowed third-party developers access to the private data of users.

"Facebook failed to sufficiently protect the privacy of its users before, during and after the unlawful processing of this data," Elizabeth Dunham, the UK's information commissioner, said in a statement at the time. "A company of its size and expertise should have known better and it should have done better."

Facebook appealed the fine in November 2018, and after some back and forth, the ICO announced Wednesday that they had finally struck a deal: Facebook would pay the more than $644,000 but has made no admission of wrongdoing or liability.

Both sides will also drop their appeals against each other and the agreement allows Facebook to retain documents disclosed by the ICO during the appeal for use in its own investigations into Cambridge Analytica.

“We are pleased to have reached a settlement with the ICO. As we have said before, we wish we had done more to investigate claims about Cambridge Analytica in 2015. We made major changes to our platform back then, significantly restricting the information which app developers could access," Harry Kinmonth, the director and associate general counsel at Facebook, said in a statement.

The statement added that protecting people's privacy and information is one of its top priorities and "we look forward to continuing to cooperate with the ICO’s wider and ongoing investigation into the use of data analytics for political purposes.”

James Dipple-Johnstone, the deputy commissioner of the ICO, said it "welcomes the agreement reached with Facebook" in a statement.

"The ICO’s main concern was that UK citizen data was exposed to a serious risk of harm. Protection of personal information and personal privacy is of fundamental importance, not only for the rights of individuals, but also as we now know, for the preservation of a strong democracy," Dipple-Johnstone added.

The Cambridge Analytica scandal revealed that one developer, GSR, harvested private data from up to 87 million Facebook users around the world without their knowledge.

Some of this data was then shared with other organizations including SCL Group, the parent company to data analytics firm Cambridge Analytica, which worked on digital political campaigning in the 2016 election.

In the U.K., the ICO found that at least 1 million British users were among those whose private data had been compromised.

ABC News' Julia Macfarlane contributed to this report.