> because even though they aren't a federal agency

Exactly. So Facebook is not violating the Privacy Act and your comment is irrelevant.

When you voluntarily chose to use their service you agreed to give them your data. It's now their data to do with what they like. If you don't like it don't use their service. Pretty simple concept that hasn't changed in the last 20 years.