[MereInterest]

My guess would be institutional pushes against any checks on data usage. Somebody implements 2FA. Somebody reduces the number of redundant databases. Somebody implements a new marketing plan. Somebody audits their legal compliance, and finds nothing wrong because the database doesn't record the provenance of each entry.

Individuals at Facebook know the law, and may even have individual incentives to follow the law. Facebook as an emergent entity, as an inhuman eldritch being built upon humans as component parts, cares nothing for the law.