Thanks for this detail - I didn’t know it included IP address and accurate Lat/Long (though I guess only if you enable location services)
I agree that that would be very de-anonymisable and probably does fall under the remit of GDPR etc.
In the present context, I think whether or not Meta is using such granular data for real time bidding currently, they’d be arguing that all the RTB data is sufficiently covered by their privacy policy. But this new dialog says “your data won’t be used for ads” which categorically rules out this possibility. I don’t doubt that Meta could be breaking the law where they have a legal argument they can use to claim they aren’t - what I do doubt is that they are breaking the law when all it would take is a single leak to demonstrate that they are lying in their privacy policy. 4% of global revenue is not to be trifled with!