[sdoering]

It is quite an interesting question if this was in fact a GDPR question.

You have a user of an electronic tool providing (potentially per definition of the GDPR) PII data to a third party without the consent of the people the data is about.

This coming from FB. The company how massively nudges people to share their whole phone books when installing any one of their apps.

So can we expect FB to stop this practice as it is structurally comparable?