It sounds good but doesn't go far enough. Facebook should not be able to use any personal data for ads, unless it is specifcally opt-in. We should have laws that make it very hard for companies to retain personal data at all. Just look at what EU did for cookies: all we get is some annoying pop-up box now, asking whether we want all or necessary cookies.
We should be way harsher on these corporations.