Meta · Meta Platform Policy

Consent Requirements for Data Access

High severity
Share 𝕏 Share in Share

What it is

You must provide users with clear and prominent notice, and obtain their explicit consent, before collecting, using, or sharing their data in ways that are not reasonably expected by users based on the context in which the data was originally shared.

Why it matters

This provision requires genuine, informed consent from users before their Facebook data is used in new or unexpected ways, which is a meaningful protection against covert data repurposing.

Consumer impact

Meta's Platform Terms directly affect consumers because they determine what third-party apps and developers can do with personal data obtained from Facebook or Instagram, including profile information, friend lists, and activity data. The terms prohibit developers from selling platform data or using it for surveillance, but enforcement depends on developer compliance rather than Meta directly protecting users. You can review and remove third-party apps that have access to your Facebook account by visiting Facebook Settings, then 'Apps and Websites', to revoke permissions for any app you no longer trust or use.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Within 30 days
    Visit Facebook Settings, go to 'Apps and Websites', review the permissions each connected app has, and remove any app that has access to data you did not knowingly consent to share.

Applicable agencies

  • FTC
    The FTC enforces against deceptive consent practices and has specific authority over apps that obtain consumer data without meaningful consent under FTC Act Section 5.
    File a complaint →
  • State AG
    State Attorneys General enforce CCPA notice and consent requirements for California residents and analogous state privacy laws.
    File a complaint →

Provision details

Document information
Document
Meta Platform Policy
Entity
Meta
Document last updated
March 24, 2026
Tracking information
First tracked
March 6, 2026
Last verified
April 4, 2026
Record ID
CA-P-001948
Document ID
CA-D-00022
Evidence Provenance
Source URL
Wayback Machine
SHA-256
4374fc1ff34a2283fed483234d25489ab19318606babb2f08722353374991450
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Meta | Document: Meta Platform Policy | Record: CA-P-001948
Captured: 2026-03-06 20:43:57 UTC | SHA-256: 4374fc1ff34a2283…
URL: https://conductatlas.com/platform/meta/meta-platform-policy/consent-requirements-for-data-access/
Accessed: April 4, 2026
Classification
Severity
High
Categories

Other provisions in this document