This analysis describes what Meta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Joint Controller status under Article 26 GDPR means both parties share legal responsibility for the processing, including obligations to data subjects, which expands the advertiser's GDPR liability beyond the Controller-Processor arrangement.
Interpretive note: The excerpt does not fully specify which 'certain Meta Business Tools' trigger joint controllership, introducing some uncertainty about scope. The canonical claim faithfully reproduces the excerpt's language of 'certain Meta Business Tools' without narrowing or broadening it.
Meta requires advertisers to accept shared GDPR legal responsibility with Meta Ireland for the collection and transmission of Personal Information through certain Meta Business Tools.
How other platforms handle this
We use information derived from cookies together with other Personal Data that you have already shared with us to deliver you information about employment opportunities that may interest you based on the job searches you made on the Website...
We do not use what you say in email, chat, video calls or voice mail, or your documents, photos or other personal files, to target advertising to you.
We use your personal information to send you newsletters and other promotional communications, including information about MyFitnessPal's new offerings, features, offers, events, webinars, and other information.
"you and Meta Ireland acknowledge and agree to be Joint Controllers in accordance with Article 26 GDPR... The joint controllership extends to the collection of such Personal Information via certain Meta Business Tools and its subsequent transmission to Meta Ireland...Excerpt from Meta's Business Tools Terms
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Joint Controller status under Article 26 GDPR means both parties share legal responsibility for the processing, including obligations to data subjects, which expands the advertiser's GDPR liability beyond the Controller-Processor arrangement.
Meta requires advertisers to accept shared GDPR legal responsibility with Meta Ireland for the collection and transmission of Personal Information through certain Meta Business Tools.
ConductAtlas has identified this type of provision across 279 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Meta.