https://www.theregister.co.uk/2018/05/02/cambridge_analytica_shutdown/
While what the company did with the data may seem immoral, there are still questions to how they obtained the data, and was what they did with it illegal? The other big question of course is, who else is doing this?
Face Book still have a lot of questions to answer, but I suspect DPR/GDPR rules won’t figure when the interrogations begin.
Smart lawyers, refusing to appear in person etc etc. It may be a decade before anyone finds out the truth and by then who will care.