Australia filed a lawsuit on Monday against Facebook for its disclosure of the private information of Australians in a manner that was a “serious” and “repeated” violation of Australian law.

Australia is suing Facebook for violating the Australian Privacy Principles guidelines on the “[u]se or disclosure of personal information.” Some of the alleged violations included having default “public” settings on the social media site, releasing information without the consent of the user, failing to adequately notify the user of the privacy settings available, and creating a system that made it difficult for users to control the privacy of their account.

Australia’s lawsuit also accused Facebook of violating the privacy principles regarding the security of personal information. They allege that Facebook failed to take appropriate measures to ensure the security of the personal information it was collecting from unauthorized disclosures. Personal information was substantially compromised from the Facebook app “This Is Your Digital Life,” which was also addressed in the lawsuit as a violation of the Australian Privacy Principles.

This is only one of several lawsuits brought against the social media platform for data breaches. For example, Facebook settled a class action lawsuit last month for a data breach that occurred in September 2018 and compromised the data of nearly 29 million users. This suit brings attention to the risk posed by the data breaches of private information being sold to Cambridge Analytica and “used for political profiling purposes.” Cambridge Analytica is a consulting firm that has been accused of illegally harvesting the private information of over 50 million Facebook users and violating US election laws.

The potential penalties to Facebook in this suit are significant. Under Australian law, “[t]he Federal Court can impose a civil penalty of up to $1,700,000 for each serious and/or repeated interference with privacy.”