In my opinion, in these type of cases, the amount should be directly correlated to how much revenue the company generated from the sale of the data. If the sale of my data is deemed illegal/unethical/etc, then I should reap all financial benefits plus damages.
What's stopping FB from just continuing this practice and just upping their costs to their customers to include this added "cost" of doing business?