Fortunately GDPR includes class action against corporations and there was already one rejected (prior to GDPR) fro EU high court with 25.000 FB users. Now it wont be rejected.