Facebook Inc. may have to pay a real price for claims it invaded users’ privacy: billions of dollars.