How anyone thinks that FB should be fined in any of this is ridiculous.
"We hate Facebook, they make too much money, therefore fine them!"
FB had APIs, that everyone in the entire world knew about. There maybe a little 'too open' for some, but nobody was screaming fraud. It seemed reasonable to most.
Then, a sneaky company inevitably came along and used the APIs to break the rules somewhat (arguably even then CA may not have).
As a result, FB did the prudent thing and nudged the APIs a little bit tighter. By the way - FB did the appropriate thing long before there was any scandal, any noise, any blowback.
FB investigated CA to make sure they deleted the data, in turn out CA lied and hid copies of the data.
There wasn't any material harm to anyone - even if CA was able to use the data to help target people (they weren't really), there are innumerable opportunities for companies to do that anyhow.
From the article: "Unless those individuals undertook a complex process of modifying their settings on Facebook, their personal information was disclosed by Facebook to the “This is Your Digital Life” App by default."
This is misrepresentative to the point of being a lie.
Facebook enables users to upload data and will only share such data with apps which the user has given authorization. In this case, users absolutely had to provide CA with the authority to access certain data, in the same way, they would have for any other app.
When Mark Zuckerberg visited Congress for his smackdown, it became clear very quickly that almost none of the Senators had a clue how FB even worked.
Of all the things I don't like Facebook for, there's nothing wrong with what they did here. They had a set of APIs unlike anyone had ever made before, the realized that they were probably a little to lose, so they tightened them up by their own volition.