Meta not only collects what you directly share but also infers sensitive characteristics about you — including health status, political views, and religious beliefs — from your browsing behavior, the content you engage with, and data others share about you.
This analysis describes what Meta Ads's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the scope of data collection practices that support Meta's service operations and analytics infrastructure. The authorization to infer information based on activity on and off Meta's Products creates the operational basis for cross-platform behavioral analysis and interest mapping.
The updated Privacy Policy no longer explicitly directs US residents to the United States Regional Privacy Notice, which previously provided details about consumer privacy rights available under state laws like the California Consumer Privacy Act and similar regulations. This removal does not eliminate those rights themselves, but it makes the Privacy Policy less clear about where consumers can find information on how to exercise those rights. Consumers can still locate the Regional Privacy Notice through Meta's website or by searching for it directly, but the removal reduces the accessibility and prominence of that guidance within the primary policy document.
View change record →Meta's inference engine can derive sensitive personal attributes — including political affiliation, health conditions, and religious identity — from your engagement patterns, and these inferences are used to target you with ads, even if you have never explicitly disclosed this information.
How other platforms handle this
"By clicking 'Next', you are indicating that you have read and agree to the TERMS OF USE AND PRIVACY POLICY"
We automatically collect certain information from your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Service, we collect information about the individual web pages or products th...
Location data. Data about your device's location, which can be either precise or imprecise. For example, we collect location data using Global Navigation Satellite System (GNSS) (e.g., GPS) and data about nearby cell towers and Wi-Fi hotspots. Location can also be inferred from a device's IP address...
Monitoring
Meta Ads has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We collect information about the things others do and information they provide about you. This can include information in the content they share about you, such as when they tag you in a photo or video or mention you in a story. We also collect contact information others provide when they use our Products. We collect information about how you use our Products, such as the types of content you view or engage with; the features you use; the actions you take; the people or accounts you interact with; and the time, frequency and duration of your activities. We infer your interests, preferences, and other information about you based on your activity on and off our Products.— Excerpt from Meta Ads's Meta Privacy Policy
REGULATORY FRAMEWORK: Inferring sensitive category data implicates GDPR Art. 9 (special categories of personal data including health, political opinions, religious beliefs, and biometric data), which requires explicit consent or another Art. 9(2) exemption as a legal basis. This is enforced by EU/EEA DPAs. CCPA/CPRA §1798.140(ae) defines 'sensitive personal information' to include health data, political opinions, and religious beliefs, granting California residents the right to limit use of such data under §1798.121. FTC Act Section 5 applies to the collection of sensitive inferred data without adequate disclosure.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the scope of data collection practices that support Meta's service operations and analytics infrastructure. The authorization to infer information based on activity on and off Meta's Products creates the operational basis for cross-platform behavioral analysis and interest mapping.
Meta's inference engine can derive sensitive personal attributes — including political affiliation, health conditions, and religious identity — from your engagement patterns, and these inferences are used to target you with ads, even if you have never explicitly disclosed this information.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Meta Ads.