According to the FTC, an independent assessor found "several gaps and weaknesses in Facebook's privacy program" that posed "substantial risks to the public."