Social media companies need to do more to comply with EU consumer rules