The European parliament voted against letting Facebook scan private messages. It passed anyway because for some reason it's set up very undemocratically. A majority vote against it wasn't enough to block it.

The people who wanted the law were the heads of every EU state, so they could pass it with or without the EU - that's probably why it's set up like that - same reason the UN is quite powerless.