The French data protection authority on Monday gave Facebook three months to stop tracking non-users' web activity without their consent and ordered the social network to stop some transfers of personal data to the United States.