The article does not mention the issue FTC took with "Verified Apps" in 2011.1 This was before FBs IPO.
WSJ had reported several times about apps leaking FB IDs and about companies such as RapLeaf linking them to users.2 They were apparently combining Facebook data with some data from public sources to identify Facebook users, in 2011.
Zuckerberg in his statements so far has used the term "derivative" data a couple of times, as if the word derivative is significant. Does Facebook believe this somehow takes it outside the scope of what they are responsible for?
1. https://www.wsj.com/amp/articles/SB1000142405270230477280457...
2. https://www.wsj.com/amp/articles/SB1000142405270230441050457...