It's completely ridiculous that the FTC is in a position where it has to impose restrictions like this in an ad-hoc case-by-case basis. In this case specifically to Facebook. Maybe I'm being naive, but if these activities are violations, there should be no need for facebook to agree to abide by them. They would have to anyway. Alternatively if these are specific restrictions on facebook, doesn't it imply it's ok for other services to do them?

The GDPR has it's flaws, but at last Europe has bitten the bullet and faced up to their responsibility to protect consumers and reign in privacy abuses. It's about time US lawmakers got their act together.