Facebook violated a 2020 data privacy order that mandated enhanced privacy controls for users, the Federal Trade Commission (FTC) alleged Wednesday, recommending stricter controls be imposed on the social media giant.

The alleged violations came to light after an independent third party conducted an assessment of Facebook’s progress toward meeting the requirements of the 2020 order and found “gaps and weaknesses” in the company’s privacy program, the FTC said in its order to show cause.

Facebook, now known as Meta, violated a 2012 FTC order by giving app developers access to users’ private data as recently as mid-2020, the FTC said. The alleged violations of the 2012 order led to the 2020 order and a $5 billion penalty against the company.