Legal Rights & Agreement Rules · Company commitment
Meta follows the DPF for EEA and Swiss personal information only in relation to the Certified Data Categories
Meta says it follows the DPF for all personal information it receives from the EEA or Switzerland under the DPF, in relation to the Certified Data Categories. Footnote 1 lists those categories (Facebook and Messenger, Instagram including Threads, Meta Business Tools, Workplace, Ads and measurement, AI, Meta Platforms Technologies Products, Research, Payment functionality, WhatsApp, plus other categories whose own policies link to this Disclosure). Personal information outside those categories is not covered by this statement.
Supporting quotations
What this disclosure covers
Meta follows the DPF for all personal information received from the EEA or Switzerland under the DPF in relation to the Certified Data Categories[1].
Qualifications & exceptions
The commitment is limited to information received “under the DPF” and to the Certified Data Categories; the footnote's last entry lets other Meta product policies add categories by linking to this Disclosure.
Not stated here
Whether a particular Meta product or data flow falls within a Certified Data Category depends on the linked product policies, which were not supplied.
Footnote 1: the Certified Data Categories are the product categories under Meta Platforms, Inc.'s DPF certifications
Footnote 1 explains that Meta Platforms, Inc.'s certifications to the EU-U.S. and Swiss-U.S. Data Privacy Frameworks, as described in this Disclosure, relate to a list of Certified Data Categories. Each entry describes a product group, names which Meta entity acts as controller, processor or sub-processor, and links to the policy that gives more detail. The entries are carded separately.
Supporting quotations
1
Certified Data Categories Under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks
Meta Platforms, Inc.'s certifications to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework, as described in the EU-U.S. and Swiss-U.S. Data Privacy Frameworks Disclosure, relate to the following Certified Data Categories:
Other Meta product data categories are certified when that product's Privacy Policy or Terms links to this Disclosure
Beyond the listed categories, a Meta Company product or service may have a Privacy Policy or Terms that links to this Disclosure for a particular data category not already specified. In that case the Disclosure says that data category is covered by Meta Platforms, Inc.'s DPF certification and is a certified data category. Readers are told to check the relevant Privacy Policy and Terms for the product or service they use.
Supporting quotations
Other Meta data categories: In some cases, a Meta Company product or service will have a Privacy Policy or Terms that also links to our EU-U.S. and Swiss-U.S. Data Privacy Frameworks Disclosure for a particular data category that is not already specified above. This means that data category is covered by Meta Platforms, Inc.'s DPF certification and is a certified data category. Please refer to the relevant Privacy Policy and Terms for the product or service that you are using for further information.
Not stated here
Which Meta Company products or services currently link to this Disclosure, and for which data categories, is not stated and the linked policies were not supplied.
Meta's DPF compliance is subject to the U.S. Federal Trade Commission's investigatory and enforcement powers
Meta states that its compliance with the DPF is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. This identifies the U.S. agency that can investigate and enforce against Meta on DPF compliance; the Disclosure does not describe how the FTC exercises those powers.
Supporting quotations
Enforcement
Meta’s compliance with the DPF is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission.
Legal Rights & Agreement Rules · User right or choice
Questions go to Meta by email; DPF certification disputes can be resolved free of charge through TRUSTe
Readers can email Meta with questions or concerns about its DPF certification. Applicable disputes with Meta related to the certification can be resolved free of charge through TRUSTe, an alternative dispute resolution provider based in the United States, reached through the linked TRUSTe Feedback and Resolution System.
Supporting quotations
Questions and disputes
Please email us with any questions or concerns about our DPF certification. You can resolve any applicable disputes with us related to our certification free of charge through TRUSTe, an alternative dispute resolution provider based in the United States. You can contact TRUSTe through the
Not stated here
No email address is given in this text; the linked TRUSTe form was not supplied.
What counts as an “applicable” dispute is not defined here.
Legal Rights & Agreement Rules · User right or choice
In some situations the DPF gives the reader a right to binding arbitration for complaints not resolved by other means
The Disclosure says that in some situations the DPF Framework gives the reader the right to invoke binding arbitration, to resolve complaints that were not resolved by other means, as described in Annex I to the DPF Framework (linked). The right is conditional and comes from the DPF itself, not from this Disclosure; the situations and procedure are in Annex I, which is not reproduced here.
Supporting quotations
In some situations, the DPF Framework gives you the right to invoke binding arbitration. You can do this to resolve complaints not resolved by other means, as described in Annex I to the
Not stated here
Annex I of the DPF Framework, which sets the situations and procedure, was not supplied.
Legal Rights & Agreement Rules · Company commitment
Meta Platforms, Inc. and its U.S. subsidiaries are certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks
Meta Platforms, Inc. and its wholly-owned U.S. subsidiaries (together called “Meta” in this Disclosure) state that they have certified their participation in the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (together, the “DPF”) with the U.S. Department of Commerce. The certification concerns Meta’s processing of personal information that it receives from the European Economic Area (“EEA”) and Switzerland under the DPF, in connection with that certification. The Disclosure is dated effective July 30, 2024. The later section “What this disclosure covers” limits this to the Certified Data Categories listed in footnote 1, so the certification does not by itself describe every Meta product; see the card on that section.
Supporting quotations
EU-U.S. and Swiss-U.S. Data Privacy Frameworks Disclosure for Meta Platforms, Inc.
Effective July 30, 2024
Meta Platforms, Inc. and its wholly-owned U.S. subsidiaries (collectively, “Meta”) have certified our participation in the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (collectively, the "DPF") with the U.S. Department of Commerce. This certification relates to Meta’s processing of personal information received from the European Economic Area (“EEA”) and Switzerland under the DPF in connection with our
Qualifications & exceptions
The certification is stated to relate to processing of EEA and Swiss personal information received “under the DPF in connection with our certification”, not to all of Meta's processing.
The section “What this disclosure covers” says Meta follows the DPF for this information only in relation to the Certified Data Categories listed in footnote 1.
Not stated here
The certification record on the Department of Commerce DPF list and the DPF Principles are linked external documents and were not supplied; this Disclosure does not reproduce the Principles.
Which wholly-owned U.S. subsidiaries are covered is not listed here.
Legal Rights & Agreement Rules · Restriction or exception
If this Disclosure conflicts with the DPF Principles, the Principles govern
Where the terms of this Disclosure conflict with the DPF Principles, the DPF Principles control, not the Disclosure. This means the Disclosure is subordinate to the Principles it describes; a reader cannot rely on this text where it says something narrower or different from the Principles.
Supporting quotations
If there is any conflict between the terms in this Disclosure and the DPF Principles, the Principles shall govern.
Not stated here
The DPF Principles are not reproduced or supplied here, so which specific terms might conflict cannot be determined from this Disclosure.
Readers are pointed to the DPF website to learn about the DPF and review Meta's certification on the DPF list
To learn more about the DPF, or to review Meta's certification entry on the DPF list, the Disclosure directs readers to the linked DPF website. The Disclosure itself does not reproduce the certification details.
Supporting quotations
To learn more about the DPF, or to review our [certification](https://lm.facebook.com/l.php?u=https%3A%2F%2Fwww.dataprivacyframework.gov%2Fs%2Fparticipant-search%2Fparticipant-detail%3Fid%3Da2zt0000000GnywAAC%26status%3DActive&h=AUBeEpakz15BEOUku9XH37HzinTlNlIy694bH3VrAaMfhxAGZncbyhHXOoliCptTgDyvyGiAJVRIr5CpJ4u1n7BTkpovoUG6b0tJTucGmCxMqr7Lx08l_fi4nXRUD6ihrCuypIx1EhhqYsXo) on the DPF list, visit the DPF
Not stated here
The linked DPF website and participant entry were not supplied.