District of Columbia Attorney General Karl Racine Monday announced a lawsuit against Facebook founder Mark Zuckerberg for violating the district’s Consumer Protection Procedures Act (CPPA) in relation to the Cambridge Analytica data breach.

According to the complaint, the Cambridge Analytica Facebook data breach was the “largest consumer privacy scandal” in US history. The District of Columbia alleged evidence that Zuckerberg was directly involved in decision making that allowed the data breach while “Facebook misled users with claims of privacy and data protection.” The District of Columbia also alleged that Zuckerberg had “direct input on Facebook’s internal policies relating to data sharing on the Platform, and was so involved that he personally reviewed certain applications’ use of data.” Further, Zuckerberg publicly took “personal responsibility for Facebook’s failures leading up to the Cambridge Analytica incident as well.”

As a remedy, the District of Columbia is asking the court to permanently block Zuckerberg from violating the CPPA, order Zuckerberg to pay restitution or damages, award civil penalties, and award the District costs related to this action and attorneys’ fees. Additionally, the District of Columbia asks the court to “grant such further relief as the Court deems just and proper.”

Racine stated, “[t]his lawsuit is not only warranted, but necessary, and sends a message that corporate leaders, including CEOs, will be held accountable for their actions.”