How is Facebook supposed to respond to the Cambridge Analytica kerfuffle?

“It’s not a data breach, our security was not compromised. But they did use personal data in ways that violate our terms. They’re supposed to pay us if they’ll be doing that.”