Data Privacy Framework

EU-US and Swiss-US Data Privacy Frameworks Disclosure for Meta Platforms, Inc.

About this Notice

Effective from 15 February 2024 | View printable version

Meta Platforms, Inc. ("Meta") has certified our participation in the EU-US Data Privacy Framework and the Swiss-US Data Privacy Framework (collectively, the "DPF") with the US Department of Commerce. This certification relates to Meta's processing of personal information received from the European Economic Area ("EEA") and Switzerland under the DPF in connection with our certification. If there is any conflict between the terms in this disclosure and the DPF principles, the principles shall govern. To learn more about the DPF, or to review our certification on the DPF list, visit the DPF website. The Swiss-US Data Privacy Framework will not be relied upon in relation to transfers of any relevant personal information to the US from Switzerland until the date of entry into force of Switzerland's recognition of adequacy (i.e. entry into force of the expected recognition by the Swiss Federal Administration that the Swiss-US DPF ensures data protection consistent with Swiss law).

What this disclosure covers

Meta follows the DPF for all personal information received from the EEA or Switzerland under the DPF in relation to the Certified Data Categories.

Please see the relevant Privacy Policy and/or other policies associated with the Certified Data Categories for details about:

The types of personal information processed
The purposes for which personal information is processed
The types of third parties to which personal information is disclosed
An individual's right to access personal information
Any choices and means offered to limit the use and disclosure of personal information
How personal information is disclosed in response to legal requests when necessary

Enforcement

Meta's compliance with the DPF is subject to the investigatory and enforcement powers of the US Federal Trade Commission. In accordance with the DPF, Meta is also liable for onward transfers to third parties that process personal information in a way that does not follow the DPF unless Meta was not responsible for the event giving rise to any alleged damage.

Questions and disputes

Please email us with any questions or concerns about our DPF certification. You can resolve any applicable disputes with us related to our certification free of charge through TRUSTe, an alternative dispute resolution provider based in the United States. You can contact TRUSTe through the TRUSTe feedback and resolution system. In some situations, the DPF framework gives you the right to invoke binding arbitration. You can do this to resolve complaints not resolved by other means, as described in Annex I to the DPF framework.