{"schema":"https://policywatcher.online/schemas/evidence-packet/v1","schemaVersion":"1.0.0","mappingVersion":"2026-07-29.1","changeId":"effbc552-bf79-49fc-958d-a5ef4407de76","screeningDate":"2026-07-06T22:10:51.539Z","publicationGate":"published","company":{"id":"6f69e944-8b6c-4dce-8693-58804624471b","name":"Meta","slug":"meta","industry":"Tech Giant"},"policy":{"id":"466d072b-d894-49fe-aa33-8d607a298f67","name":"Privacy Policy","type":"privacy","jurisdiction":"EU","sourceUrl":"https://www.facebook.com/privacy/policy/"},"sourceConfidence":{"state":"review-required","lastCheckedAt":"2026-07-06T03:59:34.660Z","retrievalChannel":"seeded","dataStatus":"Available","publicSnapshotEvidence":true,"limitation":"Source confidence describes recorded retrieval and publication state. It does not rate the provider policy or certify source authenticity."},"snapshots":{"old":{"version":1,"sha256":"85be72dc93337f4175a73ea90c24f7cde5f8fea9be17d3221acba55327f5499b","capturedAt":"2026-07-06T07:20:01.551Z"},"current":{"version":2,"sha256":"52164a545dbe7a8d2468fdc70157cf96f334218f3157404e271267a6f71d9f8c","capturedAt":"2026-07-06T22:10:51.533Z"}},"assessment":{"summary":"Meta's updated policy details expanded AI use for content creation and personalization, adds specific EU legal bases, and includes new safeguards for minors.","overallRisk":"Medium","overallScore":6,"previousPublicChange":null,"scoreDelta":null,"direction":"baseline","reasons":[{"icon":"warning","textEn":"User content explicitly used for AI training and content generation.","textIt":"Contenuti utente usati esplicitamente per addestramento e generazione IA.","deltaScore":2,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"warning","textEn":"No explicit opt-out for user content used in AI training.","textIt":"Nessun opt-out esplicito per contenuti utente usati per addestramento IA.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"},{"icon":"info","textEn":"Continues broad data collection for personalization and targeted ads.","textIt":"Continua l'ampia raccolta dati per personalizzazione e annunci mirati.","deltaScore":1,"evidenceQuote":null,"evidenceSide":null,"relatedKpi":null,"anchorStatus":"not-recorded"}],"keyPoints":[{"textEn":"Expanded AI use: Meta explicitly uses AI to understand and create content from user interactions.","textIt":"Uso IA esteso: Meta usa esplicitamente l'IA per comprendere e creare contenuti dalle interazioni utente.","sentiment":"negative"},{"textEn":"EU legal clarity: Policy now lists specific EU regulations (GDPR, Data Act) as legal bases.","textIt":"Chiarezza legale UE: La policy elenca ora specifiche normative UE (GDPR, Data Act) come basi legali.","sentiment":"positive"},{"textEn":"Minors' safeguards: New sections address users under age of majority for tailored experiences and protections.","textIt":"Tutela minori: Nuove sezioni per utenti minorenni, con esperienze personalizzate e protezioni aggiuntive.","sentiment":"positive"},{"textEn":"Data minimization: Policy explicitly mentions \"data minimisation and privacy by design\" for advertising.","textIt":"Minimizzazione dati: La policy menziona esplicitamente \"minimizzazione dati e privacy by design\" per la pubblicità.","sentiment":"positive"}],"regionImpacts":[{"region":"EU","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Clearer legal bases for Meta's processing may simplify compliance for businesses, but AI Act implications are growing.","complianceNoteEn":"GDPR Art. 28, EU AI Act"},{"region":"EU","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Explicit mention of GDPR and the new Data Act strengthens individual data access rights, but expanded AI use requires vigilance.","complianceNoteEn":"GDPR Art. 15, EU Data Act"},{"region":"Global","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Enterprises globally need to consider how Meta's expanded AI capabilities affect their data processing agreements and user consent.","complianceNoteEn":null},{"region":"Global","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Increased transparency on legal bases is positive, but the broad scope of AI data collection remains a global concern.","complianceNoteEn":null},{"region":"US","perspective":"Enterprise","riskLevel":"Medium","impactAnalysisEn":"Businesses using Meta's AI features should assess their own compliance with state-level privacy laws regarding AI data use.","complianceNoteEn":"State AI laws"},{"region":"US","perspective":"Individual","riskLevel":"Medium","impactAnalysisEn":"Expanded AI use for content creation could lead to more personalized experiences but also increased data processing.","complianceNoteEn":"CCPA/CPRA"}],"explanationBoundary":"Score reasons and deltaScore values are stored AI-assisted screening outputs. Verified anchors confirm only that the quoted passage occurs in the named snapshot; they do not prove the interpretation."},"governance":{"boundary":"Mappings identify review relevance between recorded PolicyWatcher KPI fields and framework topics. They are not legal interpretations, conformity assessments, certifications or compliance verdicts.","mappings":[{"framework":{"id":"eu-ai-act","name":"Regulation (EU) 2024/1689 (EU AI Act)","shortName":"EU AI Act","referenceUrl":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","referenceVersion":"Official Journal text, 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, automated decisions, data use and human oversight review?","kpiFields":["kpiAiTrainingOptOut","kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness"]},"status":"not-assessed","assessedCount":0,"mappedFieldCount":4,"evidence":[]},{"framework":{"id":"iso-42001","name":"ISO/IEC 42001:2023","shortName":"ISO/IEC 42001","referenceUrl":"https://www.iso.org/standard/42001","referenceVersion":"ISO/IEC 42001:2023 overview","reviewQuestion":"Which recorded policy statements may inform an AI management-system review of transparency, risk oversight and independent assurance?","kpiFields":["kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit","kpiRegulatoryCompliance"]},"status":"not-assessed","assessedCount":0,"mappedFieldCount":4,"evidence":[]},{"framework":{"id":"nist-ai-rmf","name":"NIST AI Risk Management Framework 1.0","shortName":"NIST AI RMF","referenceUrl":"https://www.nist.gov/itl/ai-risk-management-framework","referenceVersion":"AI RMF 1.0; NIST revision in progress, checked 2026-07-29","reviewQuestion":"Which recorded policy statements may support Govern, Map, Measure or Manage review questions?","kpiFields":["kpiAlgoTransparency","kpiAutomatedDecision","kpiAiBiasFairness","kpiContentModeration"]},"status":"not-assessed","assessedCount":0,"mappedFieldCount":4,"evidence":[]},{"framework":{"id":"oecd-ai-principles","name":"OECD AI Principles","shortName":"OECD AI Principles","referenceUrl":"https://oecd.ai/en/ai-principles","referenceVersion":"OECD AI Principles, updated 2024","reviewQuestion":"Which recorded policy statements may be relevant to transparency, fairness, accountability and user agency review?","kpiFields":["kpiConsentMechanism","kpiAlgoTransparency","kpiAiBiasFairness","kpiIndependentAudit"]},"status":"not-assessed","assessedCount":0,"mappedFieldCount":4,"evidence":[]}]},"humanReviewQuestions":["Does the original Privacy Policy source still match the recorded public snapshot version 2?","Do the cited source passages support each displayed reason, KPI value and regional note?","Which advisory framework topics require specialist legal, risk or governance review for this use case?","Has a later public change superseded this packet before it is reused in a decision or publication?"],"methodologyUrl":"https://policywatcher.online/methodology/confidence","changeUrl":"https://policywatcher.online/change/effbc552-bf79-49fc-958d-a5ef4407de76","boundary":"This packet records PolicyWatcher evidence and AI-assisted screening for one public change. It is not legal advice, a compliance verdict, a certification, or proof that the external source remains unchanged.","contentDigest":"59ea14302dded30246151923aac07363127a8f761fac3cd8bb2af84d3d82071c"}