> Because the scraping took place prior to GDPR, Facebook chose not to notify this as a personal data breach under GDPR.
From here https://www.dataprotection.ie/en/news-media/press-releases/d...
From here https://www.dataprotection.ie/en/news-media/press-releases/d...
So the authority is still looking into it. They could still reach an agreement with Facebook on what to do. Then Facebook would probably be shielded from whatever liability those actions would supposedly cause (their excuse "we might make mistakes"), because "we were told to".