Privacy Progress Update

How We Do It

Governance

Creating a Culture of Privacy

Regulatory Readiness Process

Privacy Risk Identification and Assessment

Safeguards and Controls

Issues Management

Privacy Red Team

Incident Management

Third-Party Oversight

Anti-Scraping

Risk Review

Technical Privacy Investments

Privacy Product Outcomes

Ongoing Commitment to Privacy

How We Do It

Since 2019, we've invested significantly in people, products, and technology to continue to evolve our rigorous privacy program. Everyone at Meta is responsible for upholding the experience and privacy expectations we provide to our users, and we use technology, policies and processes to build privacy protections into our products. With our entire company acting as the first line of defense, following the guidance of our compliance experts, we have a mature privacy program that ensures oversight and accountability at an unprecedented scale.

Photo of Chief Privacy Officer of Product Michel Protti on Meta’s Menlo Park campus

“We realized we needed an order of magnitude greater investment in privacy—the summer of 2019 was that moment. The degree of change for Meta has been massive—it's required foundational changes to our people, processes, and technical infrastructure, and oversight and accountability. And we continue to invest in protecting people's data as systems, technology, and expectations evolve.”

– Michel Protti, Chief Privacy and Compliance Officer, Product

Governance

Our work on privacy is underpinned by our internal governance structures that embed privacy and data-use standards across the company’s operations.

Privacy Product Groups

We embed privacy-focused teams within product groups to champion privacy considerations by providing expertise within each product group. These teams enable front-line ownership of privacy responsibilities across our products. We have a robust and collaborative process for infusing privacy requirements into product roadmaps across Meta. Twice a year, product teams devote an average of 6-8 weeks to privacy roadmapping, dedicating a portion of their roadmaps to building new and improved privacy protections.

Product Risk & Compliance Organization

Led by Chief Privacy and Compliance Officer, Product, Michel Protti, the Product Risk & Compliance organization is made up of dozens of teams, both technical and non-technical, focused on guiding the company on privacy strategies.

The Product Risk & Compliance Organization is at the center of our company’s commitment to its comprehensive privacy program. Its mission—to instill responsible practices and enable innovation across Meta—guides this work by ensuring people understand and trust how Meta products and services use their data responsibly.

The Product Risk & Compliance Organization is just one organization among many across the company that is responsible for privacy. There are thousands of people in different organizations and roles across Meta, including public policy, legal and product teams, who are working to embed privacy, safety, security, and other areas of risk management, into all facets of our company operations. Getting privacy right is a deeply cross-functional effort, and we believe everyone at Meta is responsible for that effort.

Privacy and Data Policy

Led by Erin Egan, Vice President and Chief Privacy Officer, Policy, the Privacy and Data Policy team leads our engagement in the global public discussion around privacy, including new regulatory frameworks, and ensures that feedback from governments and experts around the world is considered in our product design and data use practices.

To do so, the Privacy and Data Policy team consults with these groups through a variety of consultation mechanisms. This includes:

Ongoing consultations with experts as a part of our product development process, and to inform our long-term approach to privacy
Workshops (including Data Dialogues) and other convenings on complex privacy questions
Funding experts to do "deep dive" consultations with us on how we can improve aspects of our privacy program
Supporting cross-industry initiatives like Trust, Transparency and Control Labs (TTC Labs) and Open Loop that develop innovative solutions that help us and others build technology responsibly
Hosting a regular conversation series with leading privacy experts from around the world to discuss a range of pressing privacy policy topics

External Privacy Events

We support and participate in industry conferences and other events that promote privacy and share advances in privacy practices. In 2025, we shared our advances in automating purpose limitation in our infrastructure at the IAPP’s Privacy, Security and Risk conference. Erin Egan also discussed risk management and AI with Bojana Belamy, President of the Centre for Information Policy Leadership (CIPL), and Susan Cooper, Meta’s Global Data Protection Officer, in our Privacy Conversations series, which is an online discussion where Erin invites leading privacy experts from around the world to discuss a range of pressing privacy policy topics. These are opportunities for us to both share with and learn from experts, to ensure we’re taking their perspectives into account as we build products and policies.

Advisory Groups

We also partner with various experts via advisory groups. These groups inform Meta’s decision making on the most novel and complex questions we face as we build innovative technologies. We regularly consult with groups focused on:

The privacy needs around the world
Messaging and encryption
Wearables, virtual reality and the metaverse
Artificial intelligence
Monetization and ads

Privacy Legal

The Privacy Legal team is embedded in the design and ongoing execution of our program and advises on legal requirements during the course of our privacy review process.

Audit & Privacy Committee

The Audit & Privacy Committee is an independent committee of our Board of Directors that meets at least quarterly and has responsibility for privacy and product compliance oversight, among other things. The Committee is composed of independent directors with a wealth of experience serving in similar oversight roles. At least once per quarter, they receive briefings on the global policy landscape, the state of our privacy program, the status of the independent third-party assessment of our privacy program, and more.

Internal Audit

Internal Audit brings independent assurance on the overall health of our privacy program and the supporting control framework.

A group of people talking in a work meeting, surrounded by paper, tablets, and sticky notes.

Creating a Culture of Privacy

Part of ensuring that everyone understands their role in protecting privacy at Meta is driving continuous privacy learning and education that spans training and internal privacy awareness campaigns.

Training

A core component of our privacy education approach is delivered through our privacy training. Our privacy training covers the foundational elements of privacy and is designed to help everyone here at Meta feel empowered to identify privacy risks and make responsible decisions that help mitigate them, so we can all take pride in not only what we build, but how we build it. One key theme is ensuring that Meta personnel are aware that they are the first line of defense to guard against privacy risks and to mitigate such risks.

Both our annual privacy training and our privacy training courses for new hires and new contingent workers provide scenario-based examples of privacy considerations aligned with our business operations and include an assessment to test the understanding of the relevant privacy concepts. These trainings are updated and deployed annually to ensure relevant information is included in addition to core concepts.

In addition to our foundational privacy training, Meta regularly deploys specialized privacy education to targeted audiences, tailored to evolving topics and risks.

Privacy Awareness

Another way we drive company-wide awareness around privacy is through regular communication to employees. In addition to our privacy training courses, we deliver ongoing privacy content through internal communication channels, updates from Meta’s leadership, and internal Q&A sessions.

Two people in a corridor having a discussion while looking at a tablet computer.

Regulatory Readiness Process

We have a dedicated team whose job is to help ensure the company complies with global privacy and data regulations. To achieve this goal, we've developed a comprehensive, end-to-end process that helps us identify and respond to external regulatory obligations. This process provides the company with a coordinated view into all incoming regulatory obligations and a predictable process to support our responses.

Privacy Risk Identification and Assessment

We’ve created our Privacy Risk Management program to identify and assess privacy risks related to how we collect, use, share, and store user data. We leverage this process to identify risk themes, enhance our privacy program, and prepare for future compliance initiatives.

Safeguards and Controls

We’ve designed safeguards, including processes and technical controls, to address privacy risks. As a part of this effort, we conduct internal evaluations on both the design and effectiveness of the safeguards for mitigating privacy risk.

Issues Management

We’ve established a centralized Issue Management function to facilitate self-identification and remediation of privacy issues. This process spans the privacy issue management lifecycle from intake and triage, remediation planning, and closure with evidence.

Privacy Red Team

We’ve established a Privacy Red Team whose role is to proactively test our processes and technology to identify potential privacy risks. The Privacy Red Team assumes the role of external or internal parties attempting to circumvent our privacy controls and safeguards, which helps us proactively identify areas where we can improve our control environment.

Incident Management

In addition to our robust mitigations and safeguards, we also maintain a process to (1) identify when an event potentially undermines the confidentiality, integrity, or availability of data for which Meta is responsible, (2) investigate those situations, and (3) take any needed steps to address gaps we identify.

Our Incident Management program operates globally to oversee the processes by which we identify, assess, investigate, and remediate privacy incidents. Although the Privacy and Data Practices team leads the incident management process, privacy incidents are everyone’s responsibility at Meta. Teams from across the company, including legal and product teams, play vital roles. We continue to invest time, resources, and energy in building a multi-layered program that is constantly evolving and improving, and we highlight three components of our approach below.

Proactive Identification

We take a layered approach to protecting people and their information—which includes implementing safeguards designed to catch bugs proactively, before they can become a problem. Given the scale at which we operate, we have invested heavily in building and deploying a wide range of automated tools that are intended to help us identify and remediate potential privacy incidents as early and quickly as possible. These automated systems are designed to detect incidents in real time to facilitate rapid response. The oversight and diligence of our employees always play a critical role in helping to proactively identify and remediate incidents. Our engineering teams regularly review our systems to identify and remediate incidents in a timely manner.

Bug Bounty

Since 2011, we have operated a bug bounty program in which external researchers help improve the security and privacy of our products and systems by reporting potential security vulnerabilities to us. The researchers’ findings may lead to further investigation and, if necessary, remediation by Meta. The program helps us scale detection efforts and fix issues faster to better protect our community, and the bounties we pay to qualifying participants encourage more high-quality security research.

Over the past 15 years, we’ve awarded over $25 million to more than 1,400 researchers from 88 countries for helping us detect and fix issues faster, including testing products and features before they roll out to our users.

Transparency

While we’ve adopted a number of protections to guard against privacy incidents (e.g., unauthorized access to personal data) , if an incident does occur, we believe that transparency is an important way to rebuild trust in our products, services, and processes. Accordingly, beyond fixing and learning from our mistakes, our Incident Management program includes steps to notify people where appropriate, such as a post in our Newsroom or our Privacy Matters blog about issues impacting our community, or working with law enforcement or other officials to address incidents we find.

A photo of a person in conversation with someone slightly ot of focus on the right.

Third-Party Oversight

Third parties are external partners who do business with Meta but aren’t owned or operated by Meta. These third parties typically fall into two major categories: those who provide a service for Meta (like vendors who provide website design support or technology solutions to enable our business) and those who build their businesses around our platform (like app or API developers). To mitigate privacy risks posed by data and personal information exchanged with third parties, we developed a dedicated third party oversight and management program, which is responsible for overseeing third party risks and implementing appropriate privacy safeguards.

Third Party Service Providers

We’ve also created a third party assessment process for service providers to assess and mitigate security and privacy risk. Our process requires that these service providers are also bound by contracts containing privacy protections. Their risk profile determines how they are monitored, reassessed, and, where appropriate, which enforcement actions to take as a result of violations, including termination of the engagement.

Third-Party Developers

As part of Meta’s ongoing commitment to fostering a secure and privacy-centric developer ecosystem, we’ve launched new resources and initiatives designed to support responsible data use and reinforce our platform integrity.

Responsible Platform Initiatives Hub: Our Responsible Platform Initiatives Hub centralizes Meta’s approach to privacy and security with our third party developers, reinforcing our commitment to safe and responsible data practices across our platform. This hub provides resources and comprehensive guidance on our compliance-related programs, responsible development practices, and the tools that help developers align with Meta’s privacy standards. Through the hub, developers can access necessary resources related to our policies and responsible platform practices, supporting a safer and more transparent ecosystem.

Data Access and Renewal: We have a consolidated process to request, manage and renew developer access to data, reinforcing our commitment to simplifying the platform and building new developer tools. Under data access renewal, developers undergo just one regular assessment once a year to confirm continued compliance with Meta’s privacy and data protection standards and Platform Terms. This process requires developers to explicitly reaffirm their adherence to Meta’s data protection standards and Terms, and outline how and why each type of data is used.

Anti-Scraping

Our anti-scraping team is dedicated to detecting, investigating and blocking patterns of behavior associated with unauthorized scraping. Scraping is the automated collection of data from a website or app and can be either authorized or unauthorized. Using automation to access or collect data from Meta’s platforms without our permission is a violation of our terms of service.

Prevention and Mitigation

We continue to invest in infrastructure and tools to make it harder for scrapers to collect data from our services and more difficult to capitalize off of it if they do. Examples of these investments include rate limits and data limits. Rate limits cap the number of times anyone can interact with our products in a given amount of time, while data limits keep people from getting more data than they should need to use our products normally.

Investigation and Enforcement

We’ve blocked billions of suspected unauthorized scraping actions per day across Facebook, Instagram and WhatsApp, and we’ve taken a variety of actions against unauthorized scrapers including disabling accounts and requesting that companies hosting scraped data delete it.

Several people leaning over a table in a meeting room setting.

Risk Review

The Risk Review process – which includes privacy review – is a central part of developing new and updated products, services, and practices at Meta. Through this process, we assess how data will be used and protected as a part of new or updated products, services and practices. We review an average of 1,800 products, features and data practices per month across the company before they ship to assess and mitigate risks.

Our strategy is focused on embedding hundreds of high-quality, reusable internal requirements into our Risk Review system designed to meet external expectations globally. An example of a requirement is mandating that when requested, user data be deleted within a certain period of time. This way, product teams can consider privacy risks at the start of the product development process, and easily apply requirements to maintain high standards of compliance.

To help ensure those requirements are working in practice, we’ve developed consolidated and uniform technical solutions to satisfy a given requirement, with continuous compliance checks to confirm the solution is effective.

For newly developed products which may not be covered by internal requirements, such as certain AI products and features, we have a robust process in place to triage critical decisions with senior-level subject matter experts. Decisions are then codified into requirements.

A wide shot of five people in conversation standing infront of a wall of windows.

Technical Privacy Investments

By embedding privacy into Meta’s tools and processes, teams can think about privacy earlier in the product development lifecycle and more easily and consistently deliver privacy benefits for our users.

We’re investing in technological innovations that scale and improve our approach to privacy. By combining the efficiency and scalability of AI with the nuance and expertise of human judgment, we’re better able to ensure consistent decisions that deliver innovative products.

AI for Compliance Efforts

We believe that the natural evolution of risk management – historically a manual and time consuming process – leverages advanced AI and automation technology to help deliver more consistent privacy benefits for our users. By automating the rote aspects of risk management, we free up our privacy experts to focus on novel, complex, or compounding regulatory challenges throughout product development – not just before production. Our work is predicated on the philosophy that AI and humans each have unique qualifications, and by combining them effectively, we can optimize for the appropriate level of AI-human collaboration each compliance task necessitates.

Tasked with integrating AI and automation specifically for compliance, our teams have delivered breakthrough capabilities to bring greater consistency and effectiveness to our risk management. For example, automating the identification of known risks and mitigations to ensure uniform standards helps empower our experts to make precise risk identification and mitigation decisions. Plus, AI-powered detection mechanisms proactively catch code that may fall out of compliance, safeguarding our operations.

Privacy Aware Infrastructure

We continue to advance and build our privacy-aware infrastructure — innovative and efficient constructs embedded in Meta infrastructure solutions that enable engineers to more easily address complex privacy requirements as they build products. Privacy-aware infrastructure embeds privacy rules directly into code, helping ensure requirements are automatically respected. For example, we built Policy Zones that apply across our infrastructure to address restrictions on data, such as using it only for allowed purposes, providing strong guarantees for limiting the purposes of its processing. PAI continues to be crucial in enforcing complex purpose limitation scenarios while ensuring scalability, reliability, and a streamlined developer experience.

A waist up photo of a person holding a coffee cup and looking at their phone while smiling.

Privacy Product Outcomes

We’ve become a privacy-first product development company ensuring that from inception to shipping, any product or feature considers the privacy implications from the start. This is part of our commitment to delivering privacy in both new product innovations and updates to existing products. To reinforce this commitment, Privacy is a core component of performance evaluation for our engineering teams.

You can see this in many examples of products we’ve shipped:

End-to-End Encryption in Messaging

Since 2016, personal conversations on WhatsApp have been protected by end-to-end encryption, which means no one outside of a user’s chats, not even WhatsApp or Meta, can read, listen to, or share them. Starting in 2023, we have also been rolling out default end-to-end encryption for all personal one-to-one chats and calls on Messenger, making them even more private and secure.

This has taken years to deliver because we’ve taken the time to get it right. Our engineers, cryptographers, designers, policy experts and product managers have worked tirelessly to rebuild Messenger features from the ground up. Enabling end-to-end encryption on Messenger meant fundamentally rebuilding many aspects of the application protocols to improve privacy, security, and safety while simultaneously maintaining the features that have made Messenger so popular. Our approach was to leverage prior learnings from both WhatsApp and Messenger’s Secret Conversations (Messenger’s early optional end-to-end encryption offering), and then iterate on our most challenging problems like muti-device capability, feature support, message history, and web support. Along the way, we introduced new privacy, safety and control features like app lock and delivery controls that let people choose who can message them, while improving existing safety features like report, block and message requests. We’ve also made it easier to opt in to end-to-end encrypted backups by introducing passkey-encrypted backups, allowing users to encrypt their backups with their face, fingerprint, or device pin code – the same way they unlock their device.

At its core, end-to-end encryption is about protecting people’s communications, so they can feel safe expressing themselves with their friends and loved ones. We worked closely with outside experts, academics, advocates and governments to identify risks and build mitigations to ensure that privacy and safety go hand-in-hand. We commissioned an independent human rights impact assessment and designed our products to prevent harm by design, offered robust user controls and invested in proactively identifying abuse.

Wearables

Meta’s AI Glasses have built-in Meta AI, and let you snap a photo or record a video from your unique point of view, listen to music or take a call—all without having to pull out your phone, so you don’t have to choose between capturing the moment and experiencing it.

Meta’s AI Glasses were built with privacy at their core, showing our commitment to responsible innovation and privacy by design. We’ve incorporated stakeholder feedback—which we obtained early on from the moment we launched the first version of these glasses, the Ray-Ban Stories—in meaningful and tangible ways.

The capture LED is a visible light that lets others know when AI Glasses are being used to take photos and record videos, for the user’s gallery or streaming.
The glasses are configured such that users cannot capture photos or videos while the capture LED is fully covered. If the capture LED is fully obscured, the user will not be able to utilize the camera and will be notified to remove the obfuscation before proceeding.
We published an updated white paper that explains our approach to bystander signaling for active capture and AI features.
Wrist sensor data (including EMG data) from the Meta Neural Band is processed locally on user devices to enable control of AI Glasses. Users can choose to share their wrist sensor data with eta, if they are experiencing an issue with their Meta Neural Band. The Meta AI app continues to provide easy access to privacy settings to manage information and additional data sharing with Meta.

Teen Accounts

Teens are automatically placed into Teen Accounts, and teens under 16 need a parent’s permission to change any of the default built-in protections to be less strict. These Teen Accounts features are currently being rolled out globally across Instagram, Facebook, and Messenger.

Meta AI on WhatsApp

We also developed Private Processing for Meta AI on WhatsApp, which is built on top of a Trusted Execution Environment (TEE). Private Processing allows users to direct Meta AI to process their requests in a secure and private cloud environment where no one, not even Meta or WhatsApp, can access their personal messages. This technology now powers certain optional Meta AI features on WhatsApp, such as summarizing messages and providing writing help. After Private Processing finishes responding to a request, the messages aren’t stored.

Why Am I Seeing This Ad

Our “Why am I seeing this ad?” tool continues to help people understand why they’re seeing the ads they do on Facebook and Instagram feeds. One key update was summarizing information into topics about how activity both on and off our technologies—such as liking a post on a friend’s Facebook page or visiting a sports website—may inform the machine learning models we use to shape and deliver ads. We have also continued to introduce new examples and illustrations explaining how our machine learning models connect various topics to show relevant ads.

Meta Content Library and AI Tools

Meta Content Library and Content Library API are research tools that provide qualified individuals with access to publicly-accessible content from Facebook, Instagram and Threads. Individuals can search, explore and filter the data on both a graphical user interface or through a programmatic API.

Accessible data includes posts from Facebook Pages, groups, events, fundraisers, marketplace listings, and profiles, posts and stories from Instagram accounts, fundraisers and messages from channels, and posts from Threads profiles. Details about the content, such as the number of reactions, shares, comments and post view counts are available as well.

Meta launched a partnership with the Secure Data Access Center (CASD, Le Centre d’Accès Sécurisé aux Données), and as part of our collaboration, CASD will independently review research proposals to access Meta Content Library. Their global leadership ensures that the highest standards of integrity and security are maintained throughout the review process and ensures that applicants to Meta Content Library will continue to receive an independent and expert-led evaluation. This marks a transition from the University of Michigan’s Social Media Archive (SOMAR) as our independent vetting partner. We are grateful for the expertise and dedication they brought to the application review process.

To coincide with our partnership with CASD, researchers will now submit applications to access Meta Content Library through our newly launched Meta-hosted application portal, Research Tools Manager. This application infrastructure was built to enhance the onboarding and support experience for both new applicants and existing researchers.

Educating People About Privacy

Our work to communicate transparently includes providing external education to improve people’s understanding and awareness of our practices and ensuring information is accessible and easy to find.

Privacy Policy, which details how we collect, use, share, retain, and transfer information, as well as what rights and controls people have over their privacy.
Privacy Center, where people can go to better understand our practices so they can make informed decisions about their privacy in a way that is right for them. Through education and access to privacy and security controls, we address some of the most common privacy concerns from the billions of people who spend their time with us everyday. Privacy Center has several modules, including sharing, collection, use, security, youth, generative AI, and ads, to directly connect an issue or concern with the relevant privacy and security controls we’ve built across our apps and services over the years.
Data and Privacy Section of Newsroom, where we provide more information about how we’ve approached privacy in the context of particular features or issues.
Additional educational materials. We are committed to helping users understand our data practices and regularly introduce new educational resources. We launched a new animated video that clearly explains how organic personalization works and showcases the privacy controls available to users. The video also introduces the role of AI in enhancing personalization. By adding this video to our existing personalization resources, we aim to increase awareness of user controls and reinforce Meta’s dedication to transparency.

Giving People Greater Access and Control Over Their Information

To provide greater transparency and control to people, we’ve developed a number of privacy tools for people to understand what they share and how their information is used including:

Privacy Checkup: Guides people through important privacy and security settings on Facebook to help strengthen account security and manage who can see what they share and how their information is used. Privacy Checkup has five distinct topics to help people control who can see what they share, how their information is used and how to strengthen their account security.
- Who Can See What You Share helps people review who can see their profile information, like their phone number and email address, as well as their posts.
- How to Keep Your Account Secure helps people strengthen their account security by setting a stronger password and turning on two-factor authentication.
- How People Can Find You on Facebook lets people review ways in which people can look you up on Facebook and who can send you friend requests.
- Your Data Settings on Facebook lets people review the information they share with apps they’ve logged into with Facebook. They can also remove the apps they no longer use.
- Your Ad Preferences on Facebook provides information about how ads work on our Products, lets people decide what profile info advertisers can use to show them ads, and lets them control who can see their social interactions, like likes, alongside ads.
Manage Activity: Allows people to manage posts in bulk with filters to help you sort and find the content they are looking for, like posts with specific people or from a specific date range. It also includes a deletion control that provides a more permanent option, so people can move old posts in bulk to the trash. After 30 days, posts sent to the trash will be deleted, unless they choose to manually delete or restore them before then. You can access this feature by going to Activity Log in Facebook and Your Activity in Instagram.
Accounts Center: Accounts Center is a place to help people manage connected experiences and change account settings across their Facebook, Instagram, WhatsApp, and Meta accounts. People can choose to add Facebook, Instagram, WhatsApp, and Meta accounts to the same Accounts Center, enabling them to:
- Manage connected experiences across the accounts in the same Accounts Center, such as sharing posts or stories to multiple profiles at once, and logging in across accounts. Learn more.
- Manage individual settings for each account in Accounts Center, such as personal details, password & security, and your information & permissions. Learn more.
  - Download Your Information and Access Your Information: Within Accounts Center settings, Meta provides tools to make people’s information on our products useful and easy to find, such as Activity Log, Access Your Information, and Download Your Information.
- Manage settings across all accounts at once if they are in the same Accounts Center, such as ad preferences and activity off-Meta technologies (which provides a summary of activity that businesses and organizations share with us about people’s interactions, such as visiting their apps or websites, and gives people the option to disconnect their past activity from their account). Learn more.
- For WhatsApp users, adding their WhatsApp account to an Accounts Center is optional, and can unlock connected experiences across apps, such as seamlessly sharing your WhatsApp Status to Instagram or Facebook Stories. If you choose this option, your personal messages and calls are still protected with end-to-end encryption, meaning no one outside of the chat, not even WhatsApp or Meta, can read, listen to, or share them.
Meta Quest and Meta Horizon:
- Social Privacy settings: You can choose how social you want to be and how your information is shared with others through your privacy settings. You can make your Meta Horizon profile public or private, your Active Status allows you to control whether to share when you're online or were recently online, and Hide app activity lets you hide your activity for specific apps. These privacy settings are simple and easily accessible from your Quest headset or the Horizon app.
- Privacy Indicator and Permissions History: The privacy indicator that lets you know when certain privacy related features are currently in use—and which of the apps in your library are currently using them. That includes your microphone, location, spatial data, eye tracking (for Quest Pro only), and Natural Facial Expressions (for Quest Pro only). The Permissions History feature also shows which of your installed apps accessed your microphone, location, spatial data, eye tracking (for Quest Pro only), Natural Facial Expressions (for Quest Pro only), and storage data, over the last seven days.
- Parent-managed Accounts: Parents can set up parent-managed Meta accounts for 10-12 year olds (ages may vary depending on location), allowing preteens to access a vast array of engaging and educational content in VR – with age-appropriate protections built specifically for them.

Ongoing Commitment to Privacy

We’re invested in privacy and are committed to continuous improvement.

“Getting privacy right is a continual, collective investment across our company, and is the responsibility of everyone at Meta to advance our mission.”

– Michel Protti, Chief Privacy and Compliance Officer, Product

Protecting users’ data and privacy is essential to our business and our vision for the future. To do so, we’re continually refining and improving our privacy program and our products, as we respond to evolving expectations and technological developments—working with policy makers and data protection experts to find solutions to unprecedented challenges—and sharing our progress as we do.

Privacy Progress Update

Table of Contents

How We Do It

Governance

Privacy Product Groups

Product Risk & Compliance Organization

Privacy and Data Policy

External Privacy Events

Advisory Groups

Privacy Legal

Audit & Privacy Committee

Internal Audit

Creating a Culture of Privacy

Training

Privacy Awareness

Regulatory Readiness Process

Privacy Risk Identification and Assessment

Safeguards and Controls

Issues Management

Privacy Red Team

Incident Management

Proactive Identification

Bug Bounty

Transparency

Third-Party Oversight

Third Party Service Providers

Third-Party Developers

Anti-Scraping

Prevention and Mitigation

Investigation and Enforcement

Risk Review

Technical Privacy Investments

AI for Compliance Efforts

Privacy Aware Infrastructure

Privacy Product Outcomes

End-to-End Encryption in Messaging

Wearables

Teen Accounts

Meta AI on WhatsApp

Why Am I Seeing This Ad

Meta Content Library and AI Tools

Educating People About Privacy

Giving People Greater Access and Control Over Their Information

Ongoing Commitment to Privacy

“Getting privacy right is a continual, collective investment across our company, and is the responsibility of everyone at Meta to advance our mission.”