Facebook — Policy Change
Executive Summary
Meta announced a policy update allowing EU users' public posts, comments, and photos to train generative AI models. Following complaints from noyb to 11 EU data protection authorities, Meta paused the policy before its effective date. It was later rescheduled for May 2025 with updated compliance documentation.
What Happened
In June 2024, Meta notified millions of European users of a privacy policy change that would allow the company to use public posts, comments, photos, and non-public data collected since 2007 to train AI systems. Meta claimed legitimate interest under GDPR rather than seeking user consent, and planned to implement the policy on June 26, 2024. Following complaints filed by noyb to 11 EU data protection authorities and intervention by Ireland's Data Protection Commission and the UK's Information Commissioner's Office, Meta paused the policy before its effective date and later rescheduled implementation for May 2025.
Who Is Affected
The policy affects approximately 4 billion Meta users globally, with the immediate focus on users in the European Union and United Kingdom. European users would have their public content from Facebook and Instagram, including comments, status updates, photos, captions, and interactions with companies, used to train Meta's AI models. The policy also covers non-public data and information from dormant accounts that users no longer actively use but still contain personal information.
Why It Matters
This represents one of the largest proposed uses of personal data for AI training, involving billions of users' information spanning nearly two decades. Meta's reliance on legitimate interest rather than explicit consent challenges core GDPR principles, particularly after EU courts previously ruled that legitimate interest cannot justify similar data processing for targeted advertising. The broad scope of data collection, undefined AI purposes, and potential sharing with third parties sets a concerning precedent for how tech companies might circumvent user consent requirements when deploying AI technologies.
What You Should Do
European users should monitor their Meta account notification settings for updates about the rescheduled May 2025 implementation and prepare to exercise their objection rights under GDPR when the policy is reintroduced. Users can review their privacy settings now and consider limiting what content they share publicly on Facebook and Instagram. If you wish to formally object to this data processing, you can file complaints with your national data protection authority or wait for Meta to provide the opt-out mechanism required under GDPR when the policy is relaunched.
AI-Assisted
Event summaries are generated by Claude AI from verified sources and reviewed by humans before publication.
Sources