This analysis describes what Meta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Joint Controller status under Article 26 GDPR means both parties share legal responsibility for the processing, including obligations to data subjects, which expands the advertiser's GDPR liability beyond the Controller-Processor arrangement.
Interpretive note: The excerpt does not fully specify which 'certain Meta Business Tools' trigger joint controllership, introducing some uncertainty about scope. The canonical claim faithfully reproduces the excerpt's language of 'certain Meta Business Tools' without narrowing or broadening it.
Meta requires advertisers to accept shared GDPR legal responsibility with Meta Ireland for the collection and transmission of Personal Information through certain Meta Business Tools.
How other platforms handle this
We may also process information we receive, including from our partners, during such events to understand whether you are interested in our products or services...
We process your data for necessary purposes as described in the main Policy, and for secondary purposes. We use both human and automated means to process your data.
Comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities
"you and Meta Ireland acknowledge and agree to be Joint Controllers in accordance with Article 26 GDPR... The joint controllership extends to the collection of such Personal Information via certain Meta Business Tools and its subsequent transmission to Meta Ireland...Excerpt from Meta's Business Tools Terms
We read the privacy policies and terms of service of 38 AI platforms. Here is what they say about training, retention, arbitration, and liability.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Joint Controller status under Article 26 GDPR means both parties share legal responsibility for the processing, including obligations to data subjects, which expands the advertiser's GDPR liability beyond the Controller-Processor arrangement.
Meta requires advertisers to accept shared GDPR legal responsibility with Meta Ireland for the collection and transmission of Personal Information through certain Meta Business Tools.
ConductAtlas has identified this type of provision across 273 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Meta.