The problem is that the law raises more questions than it answers. But arguably, features like being
having a profile in the first place could be affected. The law demands that only the minimal amount of personal information required for a specific purpose be collected, and then that it must be deleted as soon as that purpose has been completed. They cannot request more information than perhaps the person’s name and email address, lest they run afoul of this law. So if someone posts something in their timeline, how long is it allowed to stay? Until all friends have seen it, or longer? Was it a violation of the law to even have a space for the user to enter the information into the timeline, since it wasn’t “necessary”?
So the EU has created a law that Facebook and many other online services will arguably at all times be in violation of. This will create an environment where the EU can use the threat of enforcing the law to effectively impose its will on these massive businesses that cannot comply and still run their business. This was sold to the public as a privacy law, but it’s really just a huge power play.