The change in policy is demanded by the "Independent State Centre for Data Protection, Schleswig-Holstein", a public institution of a constituent state, but not a court of law.
It will probably go through all the court instances, before a conclusion is reached. So let's talk about it next year.
Depends. Some countries empower the local data protection commission to make binding injunctions forcing a company/person to do/not do a thing. I know Ireland has this. No idea of Germany, but presume it's similar.
So, yes, this might have the same legal force as a court injunction.
Unlikely. Considering how the new Data Protection Directive being written goes further than the current one, and seems to be targetting various things Facebook does (like having all it's EU stuff in Ireland). It seems like a lot of EU law is on the side of privacy and data protection.
It will probably go through all the court instances, before a conclusion is reached. So let's talk about it next year.