Meta Ads Manager operates as part of Meta Platforms, Inc.'s advertising ecosystem, drawing on data collected across Facebook, Instagram, and third-party sites through tools such as the Meta Pixel, Conversions API, and Business Tools, as disclosed in Meta's Privacy Policy and U.S. Regional Privacy Notice. Meta's own policy documents describe sharing of user and website-visitor data with advertisers, partners, and vendors for ad targeting and measurement, while corporate ownership is clearly disclosed through SEC filings as a publicly traded Delaware corporation. Meta's regulatory record includes a 2019 FTC $5 billion settlement, two 2023 Irish Data Protection Commission fines (€390 million and €1.2 billion) tied to advertising data practices and cross-border transfers, and a 2021 disclosure that scraped data from roughly 533 million Facebook accounts had circulated online.
TRACK RECORD
1 ENFORCEMENT ACTION
[2019-07-24]
In 2019, the FTC announced a $5 billion civil penalty against Facebook and imposed new privacy oversight restrictions, describing the penalty as the largest ever imposed on a company for violating consumer privacy.
Meta's Privacy Policy states that the categories of information collected and processed about a person vary depending on how that person uses Meta's products, covering profile information, activity, device identifiers and location.
Meta's U.S. Regional Privacy Notice discloses that Meta obtains information about users' online and offline actions and purchases from third-party data providers, in addition to information collected directly from use of its products.
SEC filing aggregator data on Meta Platforms, Inc. confirms the company operates through two disclosed segments, Family of Apps and Reality Labs, and notes the company was formerly known as Facebook, Inc. before changing its name in October 2021.
Meta Platforms, Inc.'s SEC Form 10-K discloses that the company was incorporated in Delaware in July 2004, completed its IPO in 2012, and trades on the Nasdaq Global Select Market under the ticker META, with headquarters in Menlo Park, California.
Meta's U.S. Regional Privacy Notice discloses that advertisers, app developers, publishers, and other partners can send Meta information for business purposes through Meta Business Tools, social plugins, APIs, SDKs, and the Meta Pixel.
Meta's Business Tools Terms state that campaign reports and analytics generated for an advertiser will not be disclosed to third parties unless they have first been combined with campaign data from numerous other third parties and stripped of identifying information.
In 2019, the FTC announced a $5 billion civil penalty against Facebook and imposed new privacy oversight restrictions, describing the penalty as the largest ever imposed on a company for violating consumer privacy.
In April 2021, personal data including phone numbers, full names, locations, and email addresses from approximately 533 million Facebook accounts was found circulating on a hacking forum; Facebook attributed the exposure to data scraping via a contact-importer vulnerability it said it patched in 2019, rather than to a system intrusion.
On January 4, 2023, Ireland's Data Protection Commission fined Meta Ireland a total of €390 million (€210 million for Facebook, €180 million for Instagram) after finding Meta's legal basis for processing personal data for personalized advertising was invalid under the GDPR.
On May 22, 2023, Ireland's Data Protection Commission issued Meta Platforms Ireland Limited a €1.2 billion fine, the largest GDPR fine to date, over transfers of personal data to the United States found to violate the GDPR.
A compliance-industry analysis of Meta's Privacy Policy states that Meta's tracking technologies embedded via Business Tools can collect data from individuals even when they are not logged into a Facebook account or do not have one at all, with an exception carved out for users in the European Region.
Meta's Business Tools Terms, which govern advertiser use of the Meta Pixel and related tools within Ads Manager campaigns, restrict placement of pixels to websites the business itself owns and impose notice requirements on businesses deploying these tracking technologies.