The regulation itself forbids their main income source
FB has to show who they sell data to, that's the new part basically. They will probably show a long list of random companies. It'll look a bit scary, people will get accustomed to it. (FB will find a dark pattern that minimizes the attrition due to any permission/consent step in their money machine.)
The identifiable information still has to be encrypted. They still need to specify exactly where the information will go and why. And if a new company wants to access the data or even wants to use the provided Information for something new, Facebook has to ask permission again. Once again telling the user why that company needs permission and why as well.
It's doubtful that the current blanket prompt is enough. But it remains to be seen wherever the law will be enforced and it's of course possible,that nothing will change and regulator's never act on the law
