Facebook announced recently that it expects a huge fine from the Federal Trade Commission for privacy violations, and reactions from privacy advocates and cybersecurity experts are all over the map.

Some Facebook critics say the company deserves the fine, which is expected to be in the range of $3 billion to $5 billion, by far the largest fine ever imposed by the agency for privacy violation. Others say the civil penalty isn’t nearly big enough, considering the size and value of Facebook, and insist Congress must pass new rules to protect consumer privacy.