Could GDPR Have Averted Facebook's Data Debacle?