{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"6851aafc-7813-4bf9-aef3-794dc09cba9f","screeningDate":"2026-07-28T22:41:06.780Z","publicationGate":"published","company":{"id":"6f69e944-8b6c-4dce-8693-58804624471b","name":"Meta","slug":"meta","industry":"Tech Giant"},"policy":{"id":"959fc5a0-6e35-4088-811d-fbdd905e46e4","name":"Terms of Service","type":"terms","jurisdiction":"Global","sourceUrl":"https://www.facebook.com/legal/terms"},"sourceConfidence":{"state":"review-required","lastCheckedAt":"2026-07-06T03:59:34.660Z","retrievalChannel":"seeded","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":3,"sha256":"94c401fe28ed2a40bfbbec42c4f7e0d4bb26d7da1838e6b7d5e25511d73d52c7","capturedAt":"2026-07-10T01:51:40.833Z"},"current":{"version":4,"sha256":"a16f6381e16a73a67a4ae74ef5d2a7e1fd3986cfb79980da6f3de86dcecef554","capturedAt":"2026-07-28T22:41:06.778Z"}},"assessment":{"summary":"Meta's updated terms tighten rules on automated data collection, requiring compliance with new specific terms and allowing Meta to revoke access anytime.","overallRisk":"Medium","overallScore":6,"previousPublicChange":{"id":"2371bf5b-b904-4e0b-8505-4f537e426a41","overallRisk":"Medium","overallScore":6,"screeningDate":"2026-07-10T01:51:40.836Z"},"scoreDelta":0,"direction":"unchanged","reasons":[{"icon":"warning","textEn":"New specific terms for automated data collection introduced.","textIt":"Introdotti nuovi termini specifici per la raccolta automatizzata di dati.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"warning","textEn":"Meta can revoke data access permission at any time.","textIt":"Meta può revocare il permesso di accesso ai dati in qualsiasi momento.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"info","textEn":"Explicitly restricts external data scraping, enhancing user data protection.","textIt":"Limita esplicitamente lo scraping esterno, migliorando la protezione dei dati utente.","deltaScore":-1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"New 'Automated Data Collection Terms' are introduced, requiring compliance for any automated data access.","textIt":"Vengono introdotti nuovi 'Termini di Raccolta Dati Automatizzata', che richiedono conformità per qualsiasi accesso automatizzato.","sentiment":"negative"},{"textEn":"Meta explicitly reserves the right to restrict or revoke permission for automated data collection at any time.","textIt":"Meta si riserva esplicitamente il diritto di limitare o revocare il permesso per la raccolta automatizzata di dati in qualsiasi momento.","sentiment":"negative"},{"textEn":"The policy reinforces Meta's stance against unauthorized text and data mining by external parties.","textIt":"La politica rafforza la posizione di Meta contro il text e data mining non autorizzato da parte di terzi.","sentiment":"positive"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"High","impactAnalysisEn":"Businesses in the EU must strictly adhere to the new 'Automated Data Collection Terms' and GDPR when interacting with Meta's platforms. Unauthorized scraping could lead to significant penalties under GDPR and potential future AI Act regulations.","complianceNoteEn":"GDPR, AI Act"},{"region":"EU","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"The stricter rules on automated data collection may offer better protection against unauthorized scraping of personal data, aligning with GDPR principles. However, Meta's own data mining rights remain broad, which could be a concern under the upcoming AI Act.","complianceNoteEn":"GDPR, AI Act"},{"region":"Global","perspective":"Enterprise","riskLevel":"High","impactAnalysisEn":"Enterprises worldwide must now navigate Meta's explicit 'Automated Data Collection Terms' and the risk of permission revocation. This increases compliance burden for any business relying on Meta data, requiring careful legal review.","complianceNoteEn":"International Data Laws"},{"region":"Global","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Globally, users benefit from Meta's clearer stance against unauthorized data scraping, which can reduce data misuse. However, the broad reservation of rights for Meta's own text and data mining remains a privacy consideration.","complianceNoteEn":"Global Privacy Standards"},{"region":"US","perspective":"Enterprise","riskLevel":"High","impactAnalysisEn":"US businesses engaging in automated data collection from Meta platforms face increased scrutiny and must comply with the new terms. Non-compliance could lead to legal action from Meta and potential violations of state privacy laws like CCPA/CPRA.","complianceNoteEn":"CCPA, CPRA"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"These changes offer some enhanced protection against third-party data scraping, which is generally positive for user privacy. Users should still be mindful of Meta's extensive data collection practices for advertising purposes.","complianceNoteEn":"CCPA, CPRA"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAiTrainingOptOut","label":"AI training opt-out","value":"Not Available"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"}]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"},{"field":"kpiRegulatoryCompliance","label":"Regulatory compliance","value":"Partial"}]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAutomatedDecision","label":"Automated decisions","value":"Opaque"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiContentModeration","label":"Content moderation","value":"Transparent"}]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"mapped","assessedCount":4,"mappedFieldCount":4,"evidence":[{"field":"kpiConsentMechanism","label":"Consent mechanism","value":"Implicit"},{"field":"kpiAlgoTransparency","label":"Algorithmic transparency","value":"Mentioned"},{"field":"kpiAiBiasFairness","label":"AI bias and fairness","value":"Absent"},{"field":"kpiIndependentAudit","label":"Independent audit","value":"Absent"}]}]},"humanReviewQuestions":["Does the original Terms of Service source still match the recorded public snapshot version 4?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/6851aafc-7813-4bf9-aef3-794dc09cba9f","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"7b63d739d6ff028a4fc099f20e4833c7d859d17161195396f2622d9817783af3"}