Instagram, a Meta Platforms subsidiary, operates under Meta's unified privacy policy, which discloses collection of user-provided information, activity data, and device/technical data, and permits sharing of personal data with advertisers and commerce partners while stating it does not sell personal information outright. Instagram's handling of children's account settings was the subject of a €405 million fine by Ireland's Data Protection Commission in 2022, and Meta's broader privacy practices (including those tied to the Facebook platform) have drawn a record $5 billion FTC settlement in 2019, alongside a Have I Been Pwned-cataloged January 2026 breach affecting approximately 6.2 million Instagram accounts and a separately reported 17.5 million-record Instagram dataset that surfaced on a dark-web marketplace in January 2026. Corporate ownership is disclosed clearly through Meta's own privacy documentation and regulator filings naming the operating entities, though users interact with a privacy framework spanning multiple Meta-owned products.