Data types, purposes, sharing, access, choices and legal requests are in the linked Privacy Policy and other policies
This Disclosure does not itself describe Meta's data practices. It refers readers to the relevant Privacy Policy and/or the other policies associated with each Certified Data Category for: the types of personal information processed; the purposes of processing; the types of third parties to which personal information is disclosed; an individual's right to access personal information; the choices and means offered to limit use and disclosure; and how personal information is disclosed in response to legal requests when necessary.
Supporting quotations
Please see the relevant [Privacy Policy](https://www.facebook.com/privacy/policy?entry_point=POLICY_SECTION%3A1-WhatThisDisclosureCovers) and/or other policies associated with the Certified Data Categories[1] for details about:
The types of personal information processed
The purposes for which personal information is processed
The types of third parties to which personal information is disclosed
An individual’s right to access personal information
Any choices and means offered to limit the use and disclosure of personal information
How personal information is disclosed in response to legal requests when necessary
Not stated here
The Privacy Policy and the other category-specific policies were not supplied; the actual types, purposes, recipients, access procedures and choices are unknown from this text.
Use & Processing · Company practice
Facebook and Messenger: Meta Platforms Ireland Limited is controller, Meta Platforms, Inc. is processor
For the Facebook and Messenger certified data category (social networking services for connecting with friends, family and people with shared interests, including private communication, watching content, buying and selling through Marketplace or Shops, dating matches and community), Meta Platforms Ireland Limited is the controller and Meta Platforms, Inc. is a processor. More detail is in the linked Privacy Policy.
Supporting quotations
Facebook and Messenger: Social networking services that you can use to connect with friends, family and people who share the same interests, where Meta Platforms Ireland Limited is the controller and Meta Platforms, Inc. is a processor. You can communicate with others privately, watch your favourite content, buy and sell items through Marketplace or from brands and creators who sell on Shops, match with a date, and spend time with your community.
Not stated here
The linked Privacy Policy was not supplied.
Use & Processing · Company practice
Instagram, including Threads: Meta Platforms Ireland Limited is controller, Meta Platforms, Inc. is processor
For Instagram (a photo and video sharing app, with private communication, viewing, commenting, liking and buying from Shops) and apps such as Threads (an app from Instagram for viewing and sharing public conversations, posting threads, replying and following profiles), Meta Platforms Ireland Limited is the controller and Meta Platforms, Inc. is a processor. More detail is in the linked Privacy Policy and the Threads Supplemental Privacy Policy.
Supporting quotations
Instagram (including apps such as Threads): Instagram is a photo and video sharing app that allows you to upload photos and videos, and share them with friends and followers. You can also communicate with others privately, view, comment and like posts shared by friends on Instagram, and discover and buy from brands and creators who sell on Shops. Threads is an app from Instagram where you can view and share public conversations. Depending on how you use Threads, you can also post threads, reply to others and follow profiles that you're interested in. Threads and replies can include short pieces of text, links, photos, videos or any combination of these. For Instagram and Threads, Meta Platforms Ireland Limited is the controller and Meta Platforms, Inc. is a processor.
Not stated here
The linked Privacy Policy and Threads Supplemental Privacy Policy were not supplied.
Use & Processing · Company practice
Workplace: customer organisations are controllers, Meta Ireland is processor, Meta Platforms, Inc. is sub-processor
For Workplace (a service for collaborating and sharing information at work), the customer organisations are the data controllers and may share personal information about their end users with Meta; Meta Platforms Ireland Limited is the processor and Meta Platforms, Inc. is a sub-processor. Customers and their end users decide what to share, but it typically includes business contacts, customer and employee information, user-generated content and communications, and other information under the customer's control. End users are directed to the customer that manages their Workplace account and to Workplace's Privacy Policy for more information.
Supporting quotations
Workplace: A service that allows people to more effectively collaborate and share information at work. Customers (organisations who are the data controllers) may share personal information about their end users to Meta, with Meta Platforms Ireland Limited as the processor and Meta Platforms, Inc. as a sub-processor. While customers and their end users decide what information to share, they typically include things such as business contacts, customer and employee information, user-generated content and communications, and other information under the customer's control. For more information, end users may contact the customer who manages their Workplace account and review Workplace's
Not stated here
Workplace's Privacy Policy was not supplied.
Use & Processing · Context
AI: generative AI features such as Meta AI, their models, and models released through an open platform
The AI certified data category is “AI at Meta”: Meta's collection of generative AI features and experiences, such as Meta AI, together with the models that power them, and also making models available through an open platform for researchers, developers and others in the AI community. For how these models use information, the Disclosure points to the AI at Meta page and the Privacy Policy. Unlike the other categories, this entry does not say which Meta entity is controller or processor.
Supporting quotations
AI: AI at Meta is our collection of generative AI features and experiences, like Meta AI, along with the models that power them. This also includes making models available through an open platform to support researchers, developers and others in the AI community.
Not stated here
No controller, processor or sub-processor role is stated for the AI category in this Disclosure.
The AI at Meta page and Privacy Policy, which describe how the models use information, were not supplied.
Use & Processing · Company practice
Meta Platforms Technologies Products (VR/MR/AR devices, Horizon, Avatars, wearables, games): roles depend on the service
The Meta Platforms Technologies Products certified data category covers virtual, mixed and augmented reality products and services, including devices and accessories (such as Meta Quest and Samsung Gear VR), Meta Horizon Products (including Worlds, Workrooms and Managed Services), Avatars, Meta Wearable Products (such as the Meta Ray-Ban Display glasses) and Games (such as Beat Saber). Depending on the service, Meta Platforms Ireland Limited is the controller or processor and Meta Platforms, Inc. is a processor or sub-processor, respectively. More detail is in the linked Privacy Policy, the Supplemental Meta Platforms Technologies Privacy Policy and the Meta Platforms Technologies Products Definition.
Supporting quotations
Meta Platforms Technologies Products: A collection of virtual, mixed and augmented reality products and services, including: Devices and accessories (such as Meta Quest and Samsung Gear VR), Meta Horizon Products (including Worlds, Workrooms, and Managed Services), Avatars, Meta Wearable Products (such as the Meta Ray-Ban Display glasses), and Games (such as Beat Saber). Depending on the service, Meta Platforms Ireland Limited is the controller or processor and Meta Platforms, Inc. is a processor or sub-processor, respectively.
Not stated here
The three linked policies and the products definition were not supplied; which services carry which role is not stated here.
Use & Processing · Company practice
Research products and services: Meta Platforms Ireland Limited is controller, Meta Platforms, Inc. is processor
For the Research certified data category (research products and services used to conduct research that advances scholarship and innovation and promotes safety, security and integrity), Meta Platforms Ireland Limited is the controller and Meta Platforms, Inc. is a processor. Stated research goals include contributing to social good and areas of public interest, advancing technology, and improving safety, health and well-being.
Supporting quotations
Research: Research products and services used to conduct research that advances scholarship and innovation, and to promote safety, security and integrity, where Meta Platforms Ireland Limited is the controller and Meta Platforms, Inc. is a processor. Research goals include contributing to social good and areas of public interest, advancing technology, and improving safety, health and well-being.
Not stated here
The linked Privacy Policy was not supplied.
Use & Processing · Company practice
WhatsApp: WhatsApp Ireland Limited is controller or processor; Meta Platforms, Inc. is processor or sub-processor
For the WhatsApp certified data category (a messaging, video and voice calling service for users and businesses, covering text, photos, videos, documents, voice recordings, location sharing and other media), WhatsApp Ireland Limited is a controller or processor as the case may be, and Meta Platforms, Inc. is a processor or sub-processor, respectively. The Disclosure defers to the WhatsApp Privacy Policy, the WhatsApp Channels Supplemental Privacy Policy and the WhatsApp Business Terms of Service for more information about the WhatsApp data category and the effective date for such transfers.
Supporting quotations
WhatsApp: WhatsApp is a messaging, video and voice calling service that allows users or businesses to communicate through a variety of media – including, but not limited to, text, photos, videos, documents, voice recording and location sharing – where WhatsApp Ireland Limited is a controller or processor as the case may be, and Meta Platforms, Inc. is a processor or sub-processor, respectively.
Qualifications & exceptions
The effective date for WhatsApp transfers under the DPF is not stated here; it is deferred to the WhatsApp Privacy Policy.
Not stated here
The three linked WhatsApp documents, including the transfer effective date, were not supplied.