What does "sell your personal data" mean? Facebook (and Google) doesn't do that - it's much more profitable to keep it guarded so you can charge for services based on it (like ads) again and again.

So what specifically would that regulation say?