Data Report Card · Meta
Meta Data Report Card
Facebook · Instagram
§ Enforcement action
Data
Practices
Practices
2Access2Portability1Friction2Deletion1Sells0Trains AI
=
D
§
4/12
Agent
Readiness
Readiness
2Access
2Portability
0API access
=
C
4/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
§ This grade reflects a 4-point deduction (severity 2) for a verified regulatory action: 8/12 on data practices − 4 = 4/12 → D. The enforcement record is below.
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from Meta's published policy; none has been tested (run by us) yet.
2Accessstated
"Access Your Information" and the Privacy Center give a comprehensive self-serve view of your data.
Meta — Privacy Center · accessed Jun 2026 ↗2Portabilitystated
"Download Your Information" is self-serve in
Meta — export your information · accessed Jun 2026 ↗.json or HTML with granular categories, delivered in 10-30 minutes as a ZIP.1Frictionstated
The export generates fast and self-serve, but you have only 4 days to download it from the emailed link — a notably short window.
Meta — export your information · accessed Jun 2026 ↗2Deletionstated
Self-serve deletion with a 30-day grace period; delete and deactivate are clearly separated.
Meta — delete your account · accessed Jun 2026 ↗1Sells / sharesstated
"We don't sell any of your information to anyone, and we never will." But the core business is cross-context behavioral advertising.
Meta Privacy Policy · accessed Jun 2026 ↗0Trains AIstated
Trains its models on public Facebook and Instagram posts. EU/UK/Brazil users have an objection right; US users have no real opt-out.
Meta — Generative AI & your data · accessed Jun 2026 ↗§Enforcement action — deducts 4 points (severity 2); data practices without the penalty scored C (8/12)verified
Ireland's Data Protection Commission fined Meta €1.2 billion in May 2023 for unlawfully transferring EU users' data to the US — the largest GDPR fine ever issued. This follows the US FTC's $5 billion penalty in 2019, the largest privacy penalty in FTC history.
Irish Data Protection Commission · 12 May 2023 ↗0API access — feeds Agent Readiness, not the /12stated
No API lets you authorize an agent to fetch your personal Facebook or Instagram data — the Graph API serves Pages and business assets, not personal-account self-access. The only consumer path is the manual "Download Your Information" portal.
Meta — Download Your Information · accessed Jun 2026 ↗Source-verified Jun 2026 from Meta's own pages. All cells are "stated" (read from published policy and help docs); we have not yet run a live download or deletion to mark any cell "tested."
How to request your data from Meta
- Go to https://accountscenter.facebook.com/info_and_permissions/dyi/ — Meta's data-request entry point.
- Accounts Center → Your information and permissions → Export your information → Create export.
- Expected wait: varies (JSON or HTML) — Meta's stated turnaround (we haven't independently timed a request yet).
These steps reflect Meta's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.