data report card

Data Report Card · Meta

Meta Data Report Card

Facebook · Instagram
§ Enforcement action
Data
Practices
2Access2Portability1Friction2Deletion1Sells0Trains AI
=
D
§
4/12
Agent
Readiness
2Access 2Portability 0API access
=
C
4/6

Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?

§ This grade reflects a 4-point deduction (severity 2) for a verified regulatory action: 8/12 on data practices − 4 = 4/12D. The enforcement record is below.

Help me make a request →
Reviewed Jun 2026 · policies are checked weekly for changes  ·  stated — every cell is read from Meta's published policy; none has been tested (run by us) yet.
2Accessstated
"Access Your Information" and the Privacy Center give a comprehensive self-serve view of your data.
Meta — Privacy Center · accessed Jun 2026 ↗
2Portabilitystated
The self-serve export — “Export your information” in Meta Account settings (formerly “Download Your Information”) — delivers a ZIP in JSON (“a machine readable format … to transfer your information more easily when uploading it to another service”) or HTML, with granular category, date-range and media-quality selection; it can also run on a schedule to a connected external service.
Meta — Export a copy of your Facebook information · accessed Jun 2026 ↗
1Frictionstated
The export is self-serve but password-gated with possible “additional verification steps”; completion arrives by notification with no stated turnaround, and you have only 4 days to fetch the file from Available downloads before the request expires.
Meta — Export a copy of your Facebook information · accessed Jun 2026 ↗
2Deletionstated
Self-serve deletion with a 30-day grace period; delete and deactivate are clearly separated.
Meta — delete your account · accessed Jun 2026 ↗
1Sells / sharesstated
"We don't sell any of your information to anyone, and we never will." But the core business is cross-context behavioral advertising.
Meta Privacy Policy · accessed Jun 2026 ↗
0Trains AIstated
Trains its models on public Facebook and Instagram posts. EU/UK/Brazil users have an objection right; US users have no real opt-out.
Meta — Generative AI & your data · accessed Jun 2026 ↗
§Enforcement action — deducts 4 points (severity 2); data practices without the penalty scored C (8/12)verified
Ireland's Data Protection Commission fined Meta €1.2 billion in May 2023 for unlawfully transferring EU users' data to the US — the largest GDPR fine ever issued. This follows the US FTC's $5 billion penalty in 2019, the largest privacy penalty in FTC history.
Irish Data Protection Commission · 12 May 2023 ↗
0API access — feeds Agent Readiness, not the /12stated
No API lets you authorize an agent to fetch your personal Facebook or Instagram data — the Graph API serves Pages and business assets, not personal-account self-access. The only consumer path is the manual "Download Your Information" portal.
Meta — Download Your Information · accessed Jun 2026 ↗
Source-verified Jun 2026 from Meta's own pages. All cells are "stated" (read from published policy and help docs); we have not yet run a live download or deletion to mark any cell "tested." This company also publishes its models as open weights. Running them yourself, or through another host, is not governed by this policy — this grade describes Meta's own service.

Events

Breaches, policy changes, and export-format changes we’ve recorded at Meta — other parties’ actions, alongside the enforcement record above. An event never changes a grade by itself. All events →

18 Aug 2026Meta’s deletion page now describes deleting a Facebook profile rather than an account: other profiles in the same Meta Account are not affected.policy change
On the events page →

Grade history

Every change to this company’s grade since it was first published, and why. All grade changes →

31 Aug 2026Friction & speednote

Score unchanged (1). The page no longer states the 10-30-minute delivery estimate the old rationale cited; completion now arrives by notification with no stated turnaround. The deciding fact remains the 4-day download window, joined by the password gate and possible additional verification.

Meta — Export a copy of your Facebook information ↗
31 Aug 2026Portabilitynote

Score unchanged (2). Meta renamed the export tool from “Download Your Information” to “Export your information” in Meta Account settings and added scheduled export to a connected external service; the JSON machine-readable format and granular selection are still stated on the same page. The rationale now quotes the current wording.

Meta — Export a copy of your Facebook information ↗
12 Aug 2026Trains AI on your datanote

Held, not yet re-sourced. Under the two-lane rule this cell should rest on Meta's own published statements, but Meta documents the Brazilian AI-training opt-out only in-product — there is no Meta-published page to cite. Rather than silently keep a third-party citation or drop a real opt-out, the cell now carries a visible re-source-pending marker and keeps the Future of Privacy Forum's account of the ANPD case until a copy of Meta's own notice is captured. Score unchanged.

FPF — ANPD Meta case ↗
12 Aug 2026Trains AI on your datasource

Score unchanged. Re-sourced from the ICO's statement to Meta's own announcement, which states the “Legitimate Interests” basis, the always-available objection form, and the ICO engagement in Meta's own words. Grades rest on a company's own published statements; a regulator's publication belongs in the enforcement record, not behind a cell score.

Meta — Building AI Technology for the UK ↗
Previously: ICO — statement on Meta AI training
12 Aug 2026Trains AI on your datasource

Score unchanged. Re-sourced from noyb's challenge announcement to Meta's own announcement, which states the “legitimate interest” basis and an objection form users can submit at any time. An advocacy filing cannot bear a grade; the contested-legality clause was removed with it.

Meta — Making AI Work Harder for Europeans ↗
Previously: noyb — Meta AI training challenge
12 Aug 2026Trains AI on your datasource

Score unchanged. Re-sourced from press coverage to Meta's own generative-AI page, matching the US cell: the objection form Meta announced for the EU and UK is not offered in Canada. The advocacy-challenge clause was removed with the press citation.

Meta — Generative AI & your data ↗
Previously: Canadian Lawyer — challenge to Meta AI training

How to request your data from Meta

  1. Go to https://accountscenter.facebook.com/info_and_permissions/dyi/ — Meta's data-request entry point.
  2. Accounts Center → Your information and permissions → Export your information → Create export.
  3. Expected wait: varies (JSON or HTML) — Meta's stated turnaround (we haven't independently timed a request yet).

These steps reflect Meta's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.