A Canadian appellate court has ruled that Facebook breached federal privacy laws by not getting meaningful consent from users before handing their personal data to third parties and failed in its obligations to safeguard it.