Comment by CaptainZapp

The GDPR should take care of that to a large degree.

Consent must be asked for in a clear understandable fashion.

Burrying some legalese crap at page 29 of your 12'000 word TOS doesn't cut it.

Could be that Facebook tries to push the envelope yet again. They may come to regret it.