France's privacy regulator has told Facebook that the site is in violation of the country's data protection act. Furthermore, the social network has been given just three months to get its act together, or it'll face the threat of sanctions. The charges leveled against the site include the fact that it pushes data relating to its European users to servers based in the US. That's been a bone of contention across the continent, which is why the provisions governing such actions -- Safe Harbor -- were declared invalid last year. That means that Facebook's been sending your private messages to servers accessible by the NSA without any permission.