Facebook is facing massive fines over its privacy practices after the social media giant lost a federal over facial-recognition data on Thursday.

In 2015, CEO Mark Zuckerberg’s company was sued under the Illinois Biometric Information Privacy Act, a law which requires companies inform its users before acquiring and collecting biometric data including face scans. Facebook currently employs facial recognition technology in its photo tagging feature.  

The plaintiffs argued in the law suit that Facebook breached the law’s mandate. The tech giant maintained the plaintiffs failed to show injury with it use of facial recognition and that the courted exceed its authority by certifying the case.

In a 3-0 decision, the appeals court ruled Facebook violated the law and its users privacy.

 “We conclude that the development of a face template using facial-recognition technology without consent (as alleged here) invades an individual’s private affairs and concrete interests,” the court wrote in its decision, sending it back to the lower court for further proceedings.

If Facebook loses the case, the social network maybe forced to pay billions in damages. The Biometric Privacy Act permits payments of $1,000 to $5000 per violation.

Facebook will seek further review from the full court of appeals and could take the case to the Supreme Court, the company’s spokesperson said in a statement to The Verge.

“We plan to seek further review of the decision,” a Facebook spokesperson said in a statement to The Verge. “We have always disclosed our use of face-recognition technology and that people can turn it on or off at any time.”

Facebook is currently several legal battles. An Australian litigation company, JB liberty, organized by Israelis, is suing Facebook, Google and Twitter for $5 billion after the tech giants merged to effectively ban all cryptocurrency ads from the platforms.

The company is waging the class action lawsuit on behalf of members of the cryptocurrency industry and holders of cryptocurrency against Facebook, Google and Twitter for breach of the anti-cartel provisions of Australia’s Competition and Consumes Act 2010.

Investigative journalist Laura Loomer, who recently launched a congressional bid in Florida, filed a $3 billion lawsuit against Facebook, after the company defamed her by publishing that she is a “dangerous individual” and a domestic Jewish terrorist.