Garnering national headlines again, D.C. Attorney General Karl Racine is suing Facebook, alleging that the social media behemoth failed to protect its users’ private data.

Racine’s lawsuit comes less than 24 hours after the New York Times reported that Facebook allowed its business partners access to information like private messages, but his office’s investigation into the scandal-plagued company began nearly a year ago. In March, it emerged that Cambridge Analytica, a political data firm hired by the Trump election campaign, gained detailed information about 50 million Facebook users through a third-party personality survey, which it used to targeted voters.

“Facebook’s consumers reasonably expect that Facebook will take appropriate steps to maintain and protect their data,” said Racine in a press call announcing the lawsuit. “Facebook failed to live up to this commitment … In our lawsuit, we are seeking to hold Facebook accountable for jeopardizing and exposing the personal information of tens of millions of its users.” Almost half of D.C.’s residents had their data exposed in the Cambridge Analytica breach, according to data from Facebook, Racine said.

While the barrage of news about Facebook’s handling of user data has spawned multiple investigations from state attorneys general and the Federal Trade Commission, as well as hearings on Capitol Hill, this effort marks the first government action to hold the company accountable for its alleged misdeeds. Racine said his office has had discussions with a number of other states about his office’s investigation, though a formal multistate action has not been organized yet.

The lawsuit is filed under the District’s consumer protection law. It calls for the company to develop new protocols to safeguard user data and seeks up to $5,000 in civil penalties per violation, including restitution. It says that Facebook misled consumers about how well-protected their data was and made it tough for users to control their privacy settings, and then waited two years to disclose what happened with Cambridge Analytica.

“We’re reviewing the complaint and look forward to continuing our discussions with attorneys general in D.C. and elsewhere,” Facebook said in a statement Wednesday.

While Racine did not mention Trump or his campaign by name during the press call, the D.C. attorney general is also currently suing the president for violating the Constitution’s anti-corruption clause. His office recently announced it was subpoenaing a slew of organizations associated with the president’s businesses, including the Trump Organization, Trump Old Post Office LLC, the Donald J. Trump Revocable Trust, and more.