When it comes to playing games with partners like these the only winning move is not to play. Since personally identifying data is valuable and companies like

When it comes to playing games with partners like these the only winning move is not to play. Since personally identifying data is valuable and companies like Facebook have made a business of cashing in on that value there is no way for you to be sure that they won't overstep any artificial bounds which have been set by law. If you don't want them to run amok with your data you need to make sure they don't get your data, first and foremost by not voluntarily handing it to them (i.e. don't use Facebook-the-product or any of Facebook-the-company's other products), second by making it harder for them to collect data through other means. The former is easy, the latter can be harder. Blocking Facebook assets at ingress points and in ad blockers only goes so far and is made more difficult by sites using material from *.fbcdn.net (e.g. react components, etc), not to mention those Facebook holdouts who insist on tagging photo's with your name etc.