The whole issue with Cambridge Analytica and Facebook is a big deal, and it appears that at the privacy violations that ensued were a deliberate artifact of Facebook’s business model.
That this business model has been completely contemptuous of user privacy has been clear since Mark Zuckerberg was at Harvard.
While the consequences could be severe, literally involving penalties exceeding a trillion (yes, that is a “t”) dollars in accordance with a consent degree that was agreed to a few years back, the chance of meaningful penalties, or meaningful legislation is near zero.
Given the hostility of the Republican Party to regulation and consumer protections, and the Neoliberal Obama/Clinton wing of the party is so enamored of internet firms as to take any promises from tech executives at face value, meaningful government action is as likely as Jeff Sessions joining Black Lives Matter.
I expect a small fine and some theatrics at Congressional hearings, but not much else.