{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"6c63cb4a-b2bd-496e-b994-7def76160bde","screeningDate":"2026-07-06T22:11:16.607Z","publicationGate":"published","company":{"id":"6f69e944-8b6c-4dce-8693-58804624471b","name":"Meta","slug":"meta","industry":"Tech Giant"},"policy":{"id":"5946f95d-2fa3-4628-896a-f773d09ffbbd","name":"Privacy Policy","type":"privacy","jurisdiction":"US","sourceUrl":"https://www.facebook.com/privacy/policy/"},"sourceConfidence":{"state":"review-required","lastCheckedAt":"2026-07-06T03:59:34.660Z","retrievalChannel":"seeded","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"52164a545dbe7a8d2468fdc70157cf96f334218f3157404e271267a6f71d9f8c","capturedAt":"2026-07-06T07:20:06.335Z"},"current":{"version":2,"sha256":"9c785dc13c6976d29569fd221c435e1277e0fbe12fad803f4b1b69392652504b","capturedAt":"2026-07-06T22:11:16.602Z"}},"assessment":{"summary":"Meta's updated policy explicitly links WhatsApp data to your Meta accounts, expanding internal data sharing and AI usage for personalization.","overallRisk":"High","overallScore":8,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"alert","textEn":"New explicit data sharing with WhatsApp via Accounts Center.","textIt":"Nuova condivisione esplicita dei dati con WhatsApp tramite Centro Account.","deltaScore":2,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"warning","textEn":"Broader scope for AI data usage in content creation and personalization.","textIt":"Ambito più ampio per l'uso dei dati AI nella creazione di contenuti e personalizzazione.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"warning","textEn":"More explicit ad personalization, including cross-app targeting.","textIt":"Personalizzazione degli annunci più esplicita, inclusa la targetizzazione cross-app.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"Explicit data sharing with WhatsApp through Accounts Center is now detailed, increasing internal data flow.","textIt":"La condivisione esplicita dei dati con WhatsApp tramite il Centro Account è ora dettagliata, aumentando il flusso di dati interno.","sentiment":"negative"},{"textEn":"AI at Meta's role in content creation and personalization is further clarified, implying broad data use.","textIt":"Il ruolo dell'AI di Meta nella creazione di contenuti e nella personalizzazione è ulteriormente chiarito, implicando un ampio uso dei dati.","sentiment":"negative"},{"textEn":"Ad personalization is more explicitly defined, including cross-app targeting via Meta Audience Network.","textIt":"La personalizzazione degli annunci è definita più esplicitamente, inclusa la targetizzazione cross-app tramite Meta Audience Network.","sentiment":"negative"},{"textEn":"New clauses address combating racial bias and protecting user well-being, a positive step for safety.","textIt":"Nuove clausole affrontano la lotta al pregiudizio razziale e la protezione del benessere degli utenti, un passo positivo per la sicurezza.","sentiment":"positive"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"High","impactAnalysisEn":"Businesses using Meta's platforms face increased scrutiny under GDPR for data processing and transfers. Compliance with the upcoming AI Act for AI-driven features is crucial.","complianceNoteEn":"GDPR Art. 28, 44; AI Act"},{"region":"EU","perspective":"Individual","riskLevel":"High","impactAnalysisEn":"The explicit WhatsApp data sharing raises GDPR concerns regarding consent and data portability. Broad AI data usage may fall under future AI Act regulations.","complianceNoteEn":"GDPR Art. 6, 7, 20; AI Act"},{"region":"Global","perspective":"Enterprise","riskLevel":"High","impactAnalysisEn":"Global enterprises must navigate complex cross-border data transfer regulations due to Meta's expanded data sharing. Ensuring compliance with diverse international privacy frameworks is critical.","complianceNoteEn":null},{"region":"Global","perspective":"Individual","riskLevel":"High","impactAnalysisEn":"Users worldwide face increased data integration across Meta's services, potentially leading to more comprehensive profiling. Reviewing privacy settings and understanding data flows is essential.","complianceNoteEn":null},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Businesses must ensure their use of Meta's ad and data services aligns with state privacy laws like CCPA/CPRA. Transparency regarding data sharing with WhatsApp is key for consumer trust.","complianceNoteEn":"CCPA/CPRA; FTC Act"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Increased data sharing and personalization may trigger rights under CCPA/CPRA, such as the right to opt-out of sharing or targeted advertising. State-specific privacy laws are increasingly relevant.","complianceNoteEn":"CCPA/CPRA; State Privacy Laws"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"not-assessed","assessedCount":0,"mappedFieldCount":4,"evidence":[]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"not-assessed","assessedCount":0,"mappedFieldCount":4,"evidence":[]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"not-assessed","assessedCount":0,"mappedFieldCount":4,"evidence":[]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"not-assessed","assessedCount":0,"mappedFieldCount":4,"evidence":[]}]},"humanReviewQuestions":["Does the original Privacy Policy source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/6c63cb4a-b2bd-496e-b994-7def76160bde","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"2fa3d050a6aea10f3fe8c11e6a6bb62b3fcf30d1b81c37cc1b7e9809e65bef64"}