while i understand what you are saying, i don't think the law should be like that, especially for companies, where in the end nobody is going to jail.

if we see it just like that then the breaking a law is just a calculated risk. And companies take calculated risks all the time, they will take it. There is my mind no way that facebook did not know that they are breaking the law.

if we allow that the law is just one parameter in the strategy, then the law is just a tax that you have to pay if you get caught.