I don't understand why Cambridge Analytica isn't getting sued. They signed the Proof of Destruction, then didn't destroy the data. Facebook satisfactorily fixed their info sharing rules in 2014.
This all seems like a ploy so that the US gov't can get access to all of the information.
Please don't quote me on this, but I believe Facebook is in the process of investigating what really went down after they asked Cambridge Analytica to destroy the data. If Cambridge Analytica gave Facebook false information, I am sure there will be a lawsuit.