> But if you have a database of the entire population and can correlate relationships in data - what exactly does this legislation look like? "Ok Zuck, here's all my data. But don't run a `SELECT *` because that would violate my privacy".

Yes, there are laws restricting how and when data can be processed.

That someone has the ability to do something bad does not mean they cannot be restricted from doing it by the law.