Facebook and Instagram changes you need to know

Social media users have until November 20 to review their privacy settings and opt out of Meta’s expanded AI data policy. Under the updated policy, Meta may use publicly shared content—including photos, videos, posts, and comments—from users aged 18 and older to develop and train its generative AI technology. The original deadline to opt out was October 30, but Meta has since extended it by three weeks.

The policy applies across Meta-owned platforms, including Facebook, Instagram, WhatsApp, Messenger, and Threads. Although Meta has updated its Privacy Center with details about these changes, many users may be unaware of the new policy because notifications have not reached everyone. Those who do not want their publicly shared content used for AI training and development must submit an opt-out request before the November 20 deadline.

Open your app

Access your 'Settings' (three lines or cog in top right corner)

Scroll to 'Privacy Centre'

Click 'Object' (highlighted in blue)

Enter your email address (you will have to enter multiple emails if you have multiple, separate accounts)

Upon completion, you'll receive an email confirming your opt-out decision, alongside additional information about Meta's AI experience.

For years, Facebook has been an important marketing tool for small businesses, allowing them to share website links, promote products, announce events, and direct customers to their websites.

Now, Meta is testing new restrictions that could change how businesses use the platform. Under the test, some Facebook business Pages are limited to just two posts or comments containing external website links per month unless they subscribe to a paid service.

The restrictions are not universal, but some local businesses are already reporting that they are affected. Meta has not announced whether or when the limits will expand to all business Pages.

The change could create challenges for retailers, restaurants, and service providers that regularly share links to online stores, menus, appointment systems, and event registrations. Moving links from the original post to the comments does not necessarily avoid the restrictions, as those links generally count toward the same monthly limit.

There are exceptions. Paid advertisements, certain Meta-owned links, personal profiles, and Facebook Groups are not subject to the same restrictions. Qualifying news and media organizations are also exempt under the current test.

Businesses can still share photos, videos, announcements, and other content without external links. However, owners may need to become more selective about which links they share and provide more information directly in their posts.

The bigger concern is the growing dependence on platforms businesses do not control. Maintaining an updated website, Google Business Profile, and customer email list can help businesses reach customers without relying entirely on Facebook.

While Meta's test does not mean businesses must pay to maintain a Facebook presence, it could make directing customers to outside websites more difficult and potentially more expensive.

Meta is expanding the permissions associated with its business accounts, potentially allowing the company to use automated web crawlers to collect information from websites associated with businesses using Facebook, Instagram, Messenger, and WhatsApp.

Unlike previous AI policy changes focused primarily on publicly shared social media content, these terms extend to information published directly on business websites, including articles, photographs, and product descriptions.

Although Meta has revised its original language and removed explicit references to using collected website content for AI training, concerns remain about how the company may access and use information from business websites.

One important issue is the robots.txt file, which website owners use to tell automated bots which parts of their websites they can access. However, robots.txt is not a security barrier, and AI bots and web scrapers are not universally required to follow its instructions. They can ignore these requests unless other technical, contractual, or legal protections apply.

Meta maintains that website owners can use robots.txt to manage its crawlers, but businesses should understand that these instructions do not guarantee protection from every automated scraper.

The takeaway for business owners is simple: Your website content may be accessible to AI companies even when you have not specifically given them permission to use it. Reviewing website security and understanding how automated crawlers access your content is becoming increasingly important.