Facebook is not GDPR compliant at all. The only reason they appear to be is that there is no enforcement of this regulation so nobody is actually looking at what they're doing.
There's no mention of any enforcement against Facebook on that website, except for one by the German DPC of EUR 51,000 for failing to notify them about their DPO.
