They asked volunteers to install a browser extension to collect the data for them. So technically aren't they bulk collecting their volunteers' data, not Facebook's?
We really need a law/court case that establishes who owns data and who has permission to share it. The volunteers should be allowed to share whatever they want.