> since it's a directive and not actually a law in any country What? EU Directives are requirements on member states to bring in laws. That data protection dir

> since it's a directive and not actually a law in any country What? EU Directives are requirements on member states to bring in laws. That data protection directive has been implemented into national law in every EU member state… > (except perhaps maybe slightly Sweden... which is also quite a bizarre situation, having a FB data center there and all) Pretty sure Facebook is (legally) based on Ireland, and under Irish Data Procection law (which is the implementation of the EU DPD in Ireland).