What is funny about this is that in order to make the nontrivial determination that a subject is in the Union Facebook has to use all available personal data they possess about the individual such as IP history (consider the possibility of a European using an American VPN which still makes them European), geolocation history, etc... But upon establishing that they are in the Union the data they used to determine they are in the Union becomes a liability whose nonexistence would have prevented Facebook from determining if a person is in the Union. In other words they need to use personal data to determine if they need to protect and limit a user's personal data. Perhaps Facebook needs to assume all users are European?