I don't think that specific part fucks over Facebook; Facebook doesn't sell data (it sells ads based on the data, which, having skimmed the law, it doesn't seem to cover).