EU-U.S. and Swiss-U.S. Data Privacy Frameworks Disclosure for Meta Platforms, Inc.
EU-U.S. and Swiss-U.S. Data Privacy Frameworks Disclosure for Meta Platforms, Inc.
- Meta Platforms, Inc. and its U.S. subsidiaries are certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks Legal Rights & Agreement Rules
Explore the policy
##
About this Notice
##
What this disclosure covers
##
Enforcement
##
Questions and disputes
##
Terms of Service
##
Cookies Policy
About this Notice
Effective July 30, 2024
- Meta Platforms, Inc. and its U.S. subsidiaries are certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks Legal Rights & Agreement Rules
MetaMeta
Platforms, Inc. and its wholly-owned U.S. subsidiaries (collectively, “Meta”) have certified our participation in the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework (collectively, the "DPF") with the U.S. Department of Commerce. This certification relates to Meta’s processing of personal information received from the European Economic Area (“EEA”) and Switzerland under the DPF in connection with our certification. If there is any conflict between the terms in this Disclosure and the DPF Principles, the Principles shall govern. To learn more about the DPF, or to review our certification on the DPF list, visit the DPF website.
- Meta Platforms, Inc. and its U.S. subsidiaries are certified under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks Legal Rights & Agreement Rules
- If this Disclosure conflicts with the DPF Principles, the Principles govern Legal Rights & Agreement Rules
- Readers are pointed to the DPF website to learn about the DPF and review Meta's certification on the DPF list Legal Rights & Agreement Rules
Return to top
What this disclosure covers
- Meta follows the DPF for EEA and Swiss personal information only in relation to the Certified Data Categories Legal Rights & Agreement Rules
Meta follows the DPF for all personal information received from the EEA or Switzerland under the DPF in relation to the Certified Data Categories[1].
- Meta follows the DPF for EEA and Swiss personal information only in relation to the Certified Data Categories Legal Rights & Agreement Rules
Please see the relevant Privacy Policy and/or other policies associated with the Certified Data Categories[1] for details about:
- Data types, purposes, sharing, access, choices and legal requests are in the linked Privacy Policy and other policies Use & Processing
- The types of personal information processed
- The purposes for which personal information is processed
- The types of third parties to which personal information is disclosed
- An individual’s right to access personal information
- Any choices and means offered to limit the use and disclosure of personal information
- How personal information is disclosed in response to legal requests when necessary
1
- Footnote 1: the Certified Data Categories are the product categories under Meta Platforms, Inc.'s DPF certifications Legal Rights & Agreement Rules
Certified Data Categories Under the EU-U.S. and Swiss-U.S. Data Privacy Frameworks
- Footnote 1: the Certified Data Categories are the product categories under Meta Platforms, Inc.'s DPF certifications Legal Rights & Agreement Rules
Meta Platforms, Inc.'s certifications to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework, as described in the EU-U.S. and Swiss-U.S. Data Privacy Frameworks Disclosure, relate to the following Certified Data Categories:
- Footnote 1: the Certified Data Categories are the product categories under Meta Platforms, Inc.'s DPF certifications Legal Rights & Agreement Rules
- Facebook and Messenger: Social networking services that you can use to connect with friends, family and people who share the same interests, where Meta Platforms Ireland Limited is the controller and Meta Platforms, Inc. is a processor. You can communicate with others privately, watch your favourite content, buy and sell items through Marketplace or from brands and creators who sell on Shops, match with a date, and spend time with your community. For more information, visit our Privacy Policy.
- InstagramInstagram (including apps such as Threads): Instagram is a photo and video sharing app that allows you to upload photos and videos, and share them with friends and followers. You can also communicate with others privately, view, comment and like posts shared by friends on Instagram, and discover and buy from brands and creators who sell on Shops. Threads is an app from Instagram where you can view and share public conversations. Depending on how you use Threads, you can also post threads, reply to others and follow profiles that you're interested in. Threads and replies can include short pieces of text, links, photos, videos or any combination of these. For Instagram and Threads, Meta Platforms Ireland Limited is the controller and Meta Platforms, Inc. is a processor. For more information, visit our Privacy Policy and the Threads Supplemental Privacy Policy.
- Meta Business Tools: Technologies that help website owners, publishers, app developers and partners (including advertisers and others) integrate with Meta, understand and measure their products and services, and better reach and serve people who use or might be interested in their products and services. These Business Tools include Meta pixel, the Conversions API, App Events through Facebook SDK, Offline Conversions and App Events API. We also receive Business Tools data in the form of impression data sent by Facebook social plugins (for example, the Like and Share buttons) and Facebook Login, as well as data from certain APIs and from certain pilot, test, alpha or beta programmes that we may offer. Depending on the service, Meta Platforms Ireland Limited is the controller or processor and Meta Platforms, Inc. is a processor or sub-processor, respectively. For more information, visit our Privacy Policy and our Business Tools page.
- Workplace: A service that allows people to more effectively collaborate and share information at work. Customers (organisations who are the data controllers) may share personal information about their end users to Meta, with Meta Platforms Ireland Limited as the processor and Meta Platforms, Inc. as a sub-processor. While customers and their end users decide what information to share, they typically include things such as business contacts, customer and employee information, user-generated content and communications, and other information under the customer's control. For more information, end users may contact the customer who manages their Workplace account and review Workplace's Privacy Policy.
- Ads and measurement: In addition to Meta Business Tools, Meta offers other ads and measurement products and may receive personal information from unaffiliated partners (the data controllers), where Meta Platforms Ireland Limited is the processor and Meta Platforms, Inc. is a sub-processor. Information processed for ads and measurement products includes things such as contact information and information about individuals' experiences or interactions with the partners and their products, services and ads. Meta also offers ads products such as Meta Audience Network, where Meta Platforms Ireland Limited is a controller and Meta Platforms, Inc. is a processor. For more information, visit our About Facebook ads page and our Privacy Policy.
- AI: AI at Meta is our collection of generative AI features and experiences, like Meta AI, along with the models that power them. This also includes making models available through an open platform to support researchers, developers and others in the AI community. For more information on how these models use information, please see AI at Meta and our Privacy Policy.
- Meta Platforms Technologies Products: A collection of virtual, mixed and augmented reality products and services, including: Devices and accessories (such as Meta Quest and Samsung Gear VR), Meta Horizon Products (including Worlds, Workrooms, and Managed Services), Avatars, Meta Wearable Products (such as the Meta Ray-Ban Display glasses), and Games (such as Beat Saber). Depending on the service, Meta Platforms Ireland Limited is the controller or processor and Meta Platforms, Inc. is a processor or sub-processor, respectively. For more information, visit our Privacy Policy, the Supplemental Meta Platforms Technologies Privacy Policy and this Meta Platforms Technologies Products Definition.
- Research: Research products and services used to conduct research that advances scholarship and innovation, and to promote safety, security and integrity, where Meta Platforms Ireland Limited is the controller and Meta Platforms, Inc. is a processor. Research goals include contributing to social good and areas of public interest, advancing technology, and improving safety, health and well-being. For more information, visit our Privacy Policy.
- Payment functionality: Payment and related services that enable users to make purchases, donations or other payments on Meta Products, where Facebook Payments International is the data controller and Meta Platforms, Inc. and/or Meta Payments, Inc are processors. This also includes, where applicable, processing for legal obligations, including anti-money laundering, sanctions, counter terrorism, fraud prevention, monitoring and other regulatory purposes. For more information, visit the Facebook Payments International Privacy Policy.
- Payment functionality: Facebook Payments International is controller; Meta Platforms, Inc. and Meta Payments process Charges & Financial Obligations
- WhatsApp: WhatsApp is a messaging, video and voice calling service that allows users or businesses to communicate through a variety of media – including, but not limited to, text, photos, videos, documents, voice recording and location sharing – where WhatsApp Ireland Limited is a controller or processor as the case may be, and Meta Platforms, Inc. is a processor or sub-processor, respectively. For more information regarding the WhatsApp data category and the effective date for such transfers, visit the WhatsApp Privacy PolicyWhatsApp, WhatsApp Channels Supplemental Privacy Policy and WhatsApp Business Terms of Service.
- Other Meta data categories: In some cases, a Meta Company product or service will have a Privacy Policy or Terms that also links to our EU-U.S. and Swiss-U.S. Data Privacy Frameworks Disclosure for a particular data category that is not already specified above. This means that data category is covered by Meta Platforms, Inc.'s DPF certification and is a certified data category. Please refer to the relevant Privacy Policy and Terms for the product or service that you are using for further information.
- Other Meta product data categories are certified when that product's Privacy Policy or Terms links to this Disclosure Legal Rights & Agreement Rules
Return to top
Enforcement
- Meta's DPF compliance is subject to the U.S. Federal Trade Commission's investigatory and enforcement powers Legal Rights & Agreement Rules
Meta’s compliance with the DPF is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. In accordance with the DPF, Meta is also liable for onward transfers to third parties that process personal information in a way that does not follow the DPF unless Meta was not responsible for the event giving rise to any alleged damage.
- Meta's DPF compliance is subject to the U.S. Federal Trade Commission's investigatory and enforcement powers Legal Rights & Agreement Rules
- Meta is liable for third parties' non-DPF processing of onward-transferred data unless not responsible for the event Sharing & Disclosure
Return to top
Questions and disputes
- Questions go to Meta by email; DPF certification disputes can be resolved free of charge through TRUSTe Legal Rights & Agreement Rules
Please email us with any questions or concerns about our DPF certification. You can resolve any applicable disputes with us related to our certification free of charge through TRUSTe, an alternative dispute resolution provider based in the United States. You can contact TRUSTe through the TRUSTe Feedback and Resolution System. In some situations, the DPF Framework gives you the right to invoke binding arbitration. You can do this to resolve complaints not resolved by other means, as described in Annex I to the DPF Framework.
- Questions go to Meta by email; DPF certification disputes can be resolved free of charge through TRUSTe Legal Rights & Agreement Rules
- In some situations the DPF gives the reader a right to binding arbitration for complaints not resolved by other means Legal Rights & Agreement Rules
Return to top