An approval doesn't mean it's legal. When they finally looked into it they found it's violating existing laws.

Same with the data contracts with the US, Safe Harbor, Privacy Shield etc. All approved, all later on found a violation of EU law.

That's not retroactive just slow.