As far as I'm aware, Facebook has never sold personal information to advertisers[0], because that would be giving away its crown jewels. It might leak it, but doesn't hand it out for sale.
EDIT: Downvoters, please point out where I'm wrong. It looks bad for the community to suppress factual statements.
- They use 'personal' as 'private', or 'information about you'. e.g. I have a fetish, I wish no one to know, it's 'personal'.
- You seem to use 'personal' as 'personally identifiable information'. e.g. if I have this data, I can know trace back to its originator.
The ambiguity can be found in many places around. Most people don't make the distinction. Rather, they think anything private is personal. At the same time, the definition you use can be found in official documents, like GDPR, the new EU Privacy Law (https://gdpr-info.eu/art-4-gdpr/).
Facebook allows clients to purchase personal information. What specific personal information is purchased by Facebook advertisers?
Also, nothing changes the fact that Facebook is clearly harmful to the society in important ways, according to various researches. And they do not care about this fundamental issue, they just want more users and more profit.
The CA scandal did not involve any sale between CA and Facebook. CA sold insights gleaned from data pulled from Facebook's public and free-of-charge Graph API.
> Also, nothing changes the fact that Facebook is clearly harmful to the society in important ways, according to various researches.
I'm not sure how that's relevant here. Arguing that Facebook is a bad company does not make misinformation more correct.
Disclaimer: I worked at FB.