Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
This is Meta's Privacy Policy covering Facebook, Instagram, Messenger, and Meta AI, describing how Meta collects and uses personal data including posts, messages and their metadata, device identifiers, location data, and off-platform activity from third-party partners. The policy states that public content users create or share on Meta Products may be used to develop and improve AI at Meta, including for third parties, and that information from advertisers and partners about user activity off Meta platforms is used to personalize ads shown on Meta Products, including to people without a Meta account. The policy also discloses that information identified as subject to special protections, such as health data, religious views, sexual orientation, and political views, may be collected and processed where users choose to provide it, and is not used to show ads.
This document is Meta's Privacy Policy, effective July 23, 2026, governing the collection, use, sharing, retention, and transfer of personal information across Meta Products including Facebook, Instagram, Messenger, and Meta AI, with the stated legal basis of providing, personalizing, and improving those products in accordance with applicable law. The policy states that Meta collects user activity data, content created, messages and their metadata, device identifiers, location-related information, IP addresses, information from cookies and similar technologies, and data from third-party partners and vendors; and authorizes use of this information for personalized advertising, AI model development, cross-product personalization, analytics services for third-party advertisers, safety and integrity enforcement, and legal compliance disclosures. The policy explicitly states that public content users create or share may be used to develop and improve AI at Meta for Meta Products and for third parties, and that off-platform activity data received from advertisers and partners is used to personalize ads shown on Meta Products, including to users who are not logged in or do not have an account, provisions that are operationally significant relative to commonly observed data minimization and consent practices in major jurisdictions. The policy references GDPR-relevant mechanisms including cross-border data transfers, a Data Protection Officer, and access to local Data Protection Authorities, and discloses processing of special category data such as religious views, sexual orientation, political views, and health information where users choose to provide it; these provisions engage GDPR, CCPA, and potentially the EU AI Act as it applies to AI systems used in content generation and recommendation. Material compliance considerations include the adequacy of consent mechanisms for special category data processing, the legal basis for cross-border data transfers particularly to the United States, the scope of AI training data use derived from user-generated content, and the application of minor-specific protections across jurisdictions including COPPA in the United States.
The agreement authorizes collection of device identifiers, location-related information, IP addresses, browsing activity, and content metadata, as well as off-platform activity data received from third-party advertisers and partners, used to personalize advertisements shown across Meta Products and third-party apps in the Meta Audience Network. The policy states that public content users create or share may be used to develop and improve AI at Meta, including for use by third parties, and that interactions with Meta AI features and related metadata are collected and processed for AI development purposes. You can manage ad preferences, review data collected about you, download or delete your information, and adjust privacy settings through the Meta Privacy Center and the settings sections of Facebook and Instagram.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
5 important changes detected
10 versions captured · Last updated: September 2026
Meta updated its Privacy Policy in an update detected on July 24, 2026, with an effective date of July 23, 2026. The document underwent extensive revision across 150 sentences, including …
View change record →Meta updated its privacy policy on May 5, 2026 with primarily editorial and formatting changes. The company changed terminology from 'Privacy Center' to 'Privacy Centre', updated phrasing like 'our Products' …
View change record →Meta removed a reference to the United States Regional Privacy Notice from its Privacy Policy on April 21, 2026, streamlining the header section. The policy no longer explicitly directs US …
View change record →Meta has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Agentic AI Capabilities and AI Experience Personalization and similar clauses.
Compare across platforms →ConductAtlas detected a major restructuring of Meta’s privacy policy that removed detailed consumer rights disclosures and relocated them t…
Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.