Earlier quoted context omitted.
Now things are going to get interesting! I completely understand the desire for privacy but I thinkmit's unrealistic to expect that Facebook won't consolidate its data by user across all their applications. Facebook (and Google, etc.) are now in the same business as the credit reporting agencies ... You are their only product. The difference in this particular case is that Whatsapp made an explicit promise that they…
This all comes back to the two-faced saying of one thing loud and publicly while in the small print buried in legalese proclaiming something else. That practice needs to be illegal. It is basically fraud.
One aspect of European data protection is "freely given, informed consent". You can only do what the user has consented to. If a company loudly says "We'll never share it" and the ToS says "We can share it", then what has the user consented to? You could make a case that the user is consenting the loud proclamations. EU data protection law doesn't allow dense legalise behind a click-through as "consent".
So maybe EU law is already doing what you say it should do. :)