“This settlement’s historic penalty and compliance terms will benefit American consumers, and the Department expects Facebook to treat its privacy obligations with the utmost seriousness.”

So does this in theory apply just to the data of FB users who are American citizens (although I guess practically it may not be feasible for FB to treat non-American user data differently)?