In my case (in the UK) my employer would have diagnoses of diseases from sick notes, occupational health assessments that include medical information, pension d

In my case (in the UK) my employer would have diagnoses of diseases from sick notes, occupational health assessments that include medical information, pension details, payslips and personal details of my next of kin. All this would fall under GDPR protection which a) doesn't just apply to websites and b) includes the "only ask for the minimum you need to do the job" proviso so I can see Facebook's point that it's problematic for them to hand over this information. But I'd be surprised if there wasn't a law enforcement carve out that this falls under.