{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"161eb7f2-6bd6-4742-a173-ff9df57ac47f","screeningDate":"2026-07-06T22:26:18.086Z","publicationGate":"published","company":{"id":"6f69e944-8b6c-4dce-8693-58804624471b","name":"Meta","slug":"meta","industry":"Tech Giant"},"policy":{"id":"466d072b-d894-49fe-aa33-8d607a298f67","name":"Privacy Policy","type":"privacy","jurisdiction":"EU","sourceUrl":"https://www.facebook.com/privacy/policy/"},"sourceConfidence":{"state":"review-required","lastCheckedAt":"2026-07-06T03:59:34.660Z","retrievalChannel":"seeded","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":2,"sha256":"52164a545dbe7a8d2468fdc70157cf96f334218f3157404e271267a6f71d9f8c","capturedAt":"2026-07-06T22:10:51.533Z"},"current":{"version":3,"sha256":"9c785dc13c6976d29569fd221c435e1277e0fbe12fad803f4b1b69392652504b","capturedAt":"2026-07-06T22:26:18.081Z"}},"assessment":{"summary":"Meta's updated policy increases data sharing with WhatsApp and expands personalized ad targeting, raising privacy concerns despite new bias-combatting commitments.","overallRisk":"High","overallScore":8,"previousPublicChange":{"id":"effbc552-bf79-49fc-958d-a5ef4407de76","overallRisk":"Medium","overallScore":6,"screeningDate":"2026-07-06T22:10:51.539Z"},"scoreDelta":2,"direction":"higher","reasons":[{"icon":"warning","textEn":"Explicit data sharing with WhatsApp accounts now permitted.","textIt":"Condivisione esplicita dei dati con account WhatsApp ora consentita.","deltaScore":2,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"warning","textEn":"Expanded use of data for personalized ads, including off-platform.","textIt":"Uso esteso dei dati per annunci personalizzati, anche off-platform.","deltaScore":2,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"info","textEn":"AI features more explicitly tied to ad personalization.","textIt":"Funzionalità AI più esplicitamente legate alla personalizzazione degli annunci.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"Explicit data sharing with WhatsApp accounts via Accounts Center is now permitted.","textIt":"La condivisione esplicita dei dati con gli account WhatsApp tramite il Centro Account è ora consentita.","sentiment":"negative"},{"textEn":"Expanded use of data for personalized ads, including off-platform tracking via Meta Audience Network.","textIt":"Uso esteso dei dati per annunci personalizzati, inclusa la tracciatura off-platform tramite Meta Audience Network.","sentiment":"negative"},{"textEn":"AI features are more explicitly tied to ad personalization and content creation.","textIt":"Le funzionalità AI sono più esplicitamente legate alla personalizzazione degli annunci e alla creazione di contenuti.","sentiment":"negative"},{"textEn":"New commitments to combat racial bias and protect user well-being are included.","textIt":"Sono inclusi nuovi impegni per combattere i pregiudizi razziali e proteggere il benessere degli utenti.","sentiment":"positive"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Businesses using Meta's ad services or integrating with Meta products must ensure their data practices align with GDPR and upcoming AI Act requirements. Increased data flow requires robust data processing agreements.","complianceNoteEn":"GDPR Art. 28, AI Act"},{"region":"EU","perspective":"Individual","riskLevel":"High","impactAnalysisEn":"Increased data sharing with WhatsApp and expanded ad targeting raise GDPR concerns, especially regarding explicit consent and purpose limitation. Users face higher risk of extensive profiling.","complianceNoteEn":"GDPR Art. 6, 9, 25"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Global enterprises partnering with Meta must ensure their data processing and advertising strategies comply with diverse international data protection laws. Cross-border data transfer mechanisms need careful review.","complianceNoteEn":"International Data Laws"},{"region":"Global","perspective":"Individual","riskLevel":"High","impactAnalysisEn":"Users worldwide face increased data integration across Meta's ecosystem and more pervasive personalized advertising. Proactive management of privacy settings is essential.","complianceNoteEn":"Global Privacy Standards"},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Businesses relying on Meta's ad network need to review their compliance with state-specific privacy laws regarding targeted advertising and data sales. Transparency with consumers is crucial.","complianceNoteEn":"State Privacy Laws"},{"region":"US","perspective":"Individual","riskLevel":"High","impactAnalysisEn":"Expanded data sharing and ad targeting increase privacy risks under CCPA/CPRA. Users should actively manage privacy settings to limit data collection and sharing.","complianceNoteEn":"CCPA/CPRA, State Privacy Laws"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Not Available"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Committed"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Committed"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Partial"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Committed"},{"field":"kpiContentModeration","label":"Content moderation","value":"Partial"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Implicit"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Committed"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Privacy Policy source still match the recorded public snapshot version 3?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/161eb7f2-6bd6-4742-a173-ff9df57ac47f","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"2a5e4f78a6bba5765c5de2069ea059222189a12528c4f621db2af437eb9bd41e"}