The policy states that Meta determines data retention periods on a case-by-case basis according to operational, legal, and interest-protection needs, and reserves the right to retain information for extended periods in specified circumstances.
This analysis describes what Meta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that there is no uniform or disclosed maximum retention period for user data, and that Meta may retain information for extended durations based on internally assessed criteria including protection of its own interests, creating compliance considerations under GDPR's storage limitation principle and equivalent frameworks.
Interpretive note: The policy does not specify maximum retention periods for individual data categories or define the criteria for extended retention with sufficient granularity to assess compliance with GDPR's storage limitation principle on the face of the document alone.
The updated Privacy Policy no longer explicitly directs US residents to the United States Regional Privacy Notice, which previously provided details about consumer privacy rights available under state laws like the California Consumer Privacy Act and similar regulations. This removal does not eliminate those rights themselves, but it makes the Privacy Policy less clear about where consumers can find information on how to exercise those rights. Consumers can still locate the Regional Privacy Notice through Meta's website or by searching for it directly, but the removal reduces the accessibility and prominence of that guidance within the primary policy document.
View change record →This new provision adds explicit disclosure about data retention policies and extended preservation practices, addressing user concerns about how long Meta retains personal data.
View full change record →Under this clause, the retention period for user data including content, messages, device identifiers, and behavioral information is determined by Meta on a case-by-case basis, with no disclosed maximum period for most data categories. The agreement states that in some instances Meta will retain information for extended periods, including for legal compliance and safety purposes.
Cross-platform context
See how other platforms handle Information Retention and Extended Preservation and similar clauses.
Compare across platforms →"We keep information as long as we need it to provide our Products, comply with legal obligations or protect our or other's interests. We decide how long we need information on a case-by-case basis. In some instances and for specific reasons, we'll keep information for an extended period of time.Excerpt from Meta's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages GDPR Article 5(1)(e) regarding the storage limitation principle, which requires personal data to be kept no longer than necessary for specified purposes.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that there is no uniform or disclosed maximum retention period for user data, and that Meta may retain information for extended durations based on internally assessed criteria including protection of its own interests, creating compliance considerations under GDPR's storage limitation principle and equivalent frameworks.
Under this clause, the retention period for user data including content, messages, device identifiers, and behavioral information is determined by Meta on a case-by-case basis, with no disclosed maximum period for most data categories. The agreement states that in some instances Meta will retain information for extended periods, including for legal compliance and safety purposes.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Meta.