The city of Washington, D.C., on Wednesday filed a lawsuit against Facebook over the social media giant’s alleged failure to protect user information, opening the company up to a new set of challenges as it faces increasing pressure from Congress over unauthorized data disclosures.

“Facebook’s policies and practices related to third party access and use of consumer data violate the District’s consumer protection laws,” the complaint reads. The company “could have prevented third parties from misusing its consumers’ data had it implemented and maintained reasonable oversight.”