It is only the first day of the General Data Protection Regulation or GDPR (May 25) and Facebook and Google are already in violation of the rules. The General Data Protection Regulation (GDPR) (EU) 2016/679 is a regulation in EU law on data protection and privacy for all individuals within the European Union. It applies to Europe in general, but companies with an Internet presence must be compliant with these rules or else will face a fine and even more sanctions if they do not wish to comply. This has led to many companies and websites changing their privacy policies and features worldwide, informing their users often through e-mail or an announcement on their website. Although it applies to citizens of the European Union, it will also affect the rest of the world as international companies meet compliance.
Many companies have released an update to their privacy policy in regards to GDPR. They must disclose that they are compliant to "clear consent and justification for any personal data collected from users". It appears that FB and Google, very voracious collectors of user data, did not comply with the GDPR's rules about privacy. Both companies did update their TOS which seems to relate to the GDPR. It really seems like users have surrendered so much of their information, it doesn't really matter at this point unless it is about more private data like license driver number, social security, etc. FB and Google don't get that personal, but they still do plenty of analytics for Big Data which third party buyers are very much interested in.
Both companies collect user data to better service their users. In return, users like us get "FREE" access to their products. However, the regulators of GDPR view both Google and Facebook's new TOS as "forced consent" and that is the issue. Under the GDPR, when users are asked to consent, they should be given a "FREE CHOICE" of not allowing their data to be collected – and it should not be a condition of using a service. Both companies have claimed they meet compliance, but let's see how this can affect overall enforcement of GDPR.
Further Reading:
https://www.theverge.com/2018/5/25/17393766/facebook-google-gdpr-lawsuit-max-schrems-europe