Depends. Some countries empower the local data protection commission to make binding injunctions forcing a company/person to do/not do a thing. I know Ireland has this. No idea of Germany, but presume it's similar.
They might force FB to do this. But having seen what happens here with Google or all the other cases, I really doubt their "power" or will to do much more, than symbolic policy.
