GDPR law would in theory mean Facebook would have been fined up to $813 million dollars for allowing Cambridge Analytica to take the data it did. Law comes into action May 2018.

Wired Article in GDPR wired.co.uk/article/what-i…