Reply to post:

So the crux of his argument is that Facebook transferred his data outside the EU. Surely for this to work, he has to show firstly that he had a reasonable expectation the data would be stored/processed in the EU, and then secondly, that the data was transferred outside the EU without his permission?