There's a very strong assumption that Facebook are operating in good faith. The article suggests you need actice consent, which is what a basic reading of gdpr

There's a very strong assumption that Facebook are operating in good faith. The article suggests you need actice consent, which is what a basic reading of gdpr rules would mean. I don't know why hiding it in the terms and conditions would possible be conpatible.