The social network could face a hefty fine if it is found to have breached data protection rules.