The alternatives I saw in the Dutch news article were face or fingerprint recognition which is even worse. In general they're leaving it to Facebook to figure out how to comply, and they will be more than happy to absorb as much user data as possible - now that have a legal basis as an excuse.