Please note, those aren't my words but a response to the strongest plausible interpretation of the comment I'm responding to. (ie. it's hyperbole, meaning "the US relies heavily on torts to enforce consumer privacy compared to other countries")

Privacy law in the US is largely toothless and has vanishingly few proactive regulatory requirements. This case is a perfect example of this -- Facebook's blatant disregard for privacy wasn't what was found illegal here, it was only the fact they lied about it.