As more people become aware of the scope of Facebook's data collection and as consequences begin to attach to that data collection, whether economic or regulatory, Facebook will have to take a long look at its privacy practices and make changes consistent with user expectations and regulatory requirements.
GDPR requires positive opt-in to all commercial use of personal data.
"It is one of those hard things where yes we can ask Facebook not to show us that it's happening but we can't stop it from happening".
But Facebook won't just ask permission from Europeans, the company announced on Tuesday.
Ads based on data from partners.
Facebook will now ask users whether they want their personal data to be shared with advertisers so that ads on the platform will (theoretically) be more targeted to their interests.
Information in their profile.
It asked users to choose if they want to continue to share information like religious and political views as well as relationship status. Later, the same options will show up for Facebook users globally.
"We're committed to making sure people understand how we use their information and how they can control it", Egan concluded.
Allowing face recognition technology.
Several commentators have criticized Facebook since the announcement, pointing out that instead of giving users a clear choice, Facebook is trying to use user interface tricks, often called "dark patterns", to get people to give it permission.
This is unlike a facial recognition system like Apple's Face ID which uses a series of cameras to create a 3D map of your face and then it stores that on the device itself.
They also mentioned "special protections and experiences" for teens, including limited advertising categories, no facial recognition and limits on who can see or search for teens' information on Facebook.
Turning off facial recognition.
The BBC explains that face-recognition is used in three ways.
June 2011 was the date on which Facebook rolled out its "tag suggestions" feature.
We'll let you know when someone else uploads a photo of you as their profile picture.
In a worst-case scenario for Facebook, the company would have to pay billions in damages for this new type of user privacy breach.
But even Facebook's new privacy screens don't explicitly give the user an option to "decline", according to Reuters. Anyone wishing to do this will be warned that it will result in the closure of their account.
The major component of Facebook's reforms is asking people to review how it uses data.
Facebook has vowed that there will always be a free ad-funded tier, but has not ruled out a paid ad-free tier - though this could prove expensive.