[pas]

FB will have to do the aggregation themselves, and then the sell the aggregated data. no PII. and they are doing that, allowing targeting and stopped the messaging legacy APIs, now if an app wants to read your messages it has to ask for permission. (I don't even know if there is such a permission anymore.)

That said, I hope the EU courts will look at them the first time they fuck up. (And that might be right now. But so far I'm not aware of any recent FB data/privacy abuse.)