Facebook could face up to $5 billion fine for privacy violations