The company also must establish and maintain a comprehensive information security program, which will be assessed by an independent auditor every other year for 10 years.
FORBES: Feds Settle Twitter's Privacy Case, But Twitter Still Has Security Problems (Updated)