Chris Cox, Facebook's chief product officer, called the new settings "the first of many steps" the company is taking to address privacy concerns. Facebook has been working on the changes in preparation for the European Union's General Data Protection Regulation, which was approved two years ago and takes effect May 25. The rules are designed to make it easier for consumers to give and withdraw consent for the use of their data. They apply to any company that collects data on EU residents, no matter where it's based. Wednesday's announcement follows revelations that a Trump-affiliated consulting firm, Cambridge Analytica, got data on millions of Facebook users and that Facebook has collected years of contact names, telephone numbers, and call and text histories from Android users. On Monday, the FTC said it's investigating Facebook over its privacy practices.