Facebook and Instagram parent company has three months to bring its services in line with EU law, regulator said.