
Meta gave European users something most platforms never offer: a formal right to say no. Whether that right does what it promises is a different matter.
On 30 October 2026, Meta Platforms was due to enforce revised Commercial Terms and Self-Serve Ad Terms that would allow it to use content posted publicly on Facebook and Instagram to train its AI models. Publishers objected loudly enough that Meta postponed the enforcement date to 20 November 2026. The Movement for an Open Web, whose members include advertisers and publishers, filed complaints with the European Commission and the UK Competition and Markets Authority, requesting interim measures, according to Silicon.co.uk. The complaints argue that Meta's terms effectively strip publishers of control over how their content is used, and that the AI training clause goes beyond what users agreed to when they first posted.
European and British users have a formal channel to contest this because of GDPR. The General Data Protection Regulation, in force since 2018, requires that personal data be processed only with a lawful basis, and where that basis is "legitimate interests" rather than explicit consent, users carry the right to object. Meta has relied on legitimate interests as its justification for processing data for AI training purposes, which is precisely what activates the objection mechanism. 404 Media reported in October 2026 that EU and UK users can file a formal objection through Meta's own settings, and that the GDPR and the EU AI Act together govern how those rights are exercised, including the right to withdraw consent at any time.
Users outside the EU and UK have no equivalent route. In the United States and most other jurisdictions, Meta's updated terms operate on an opt-out model that relies on local privacy laws, and those laws offer narrower, less enforceable protections. A California resident can request deletion of their data under the California Consumer Privacy Act, but that is a deletion right, not an ongoing objection right that freezes processing while the complaint is assessed. The difference between what European and British users can do and what everyone else can do follows directly from regulatory architecture, not from any voluntary choice Meta made.
Filing an objection does not automatically stop Meta from training on your data. Under GDPR, a data controller receiving an objection based on legitimate interests must stop processing unless it can demonstrate compelling legitimate grounds that override the individual's interests. Meta has not publicly confirmed that it suspends processing for objecting users while it assesses each claim. Given the volume of users across its platforms, how Meta enforces individual objections in practice remains genuinely unclear.
The EU AI Act bears on this, but more narrowly than its billing suggests. As 404 Media noted, the Act builds on the GDPR framework to set out how AI companies can use personal data and how users can opt in or out. Its personal data provisions largely reinforce the GDPR baseline rather than create new substantive rights. The Act's primary contribution on this question is governance of the systems built with that data, not the collection itself. For users trying to object to training data use, GDPR remains the sharper instrument.
Meta's history on this specific question gives users some reason to believe the objection mechanism carries teeth. In June 2024, Meta paused its plans to use historical data from British and EU users after the Information Commissioner's Office raised concerns and activist group noyb applied public pressure, as The Register reported. Meta eventually resumed, but the pause confirmed that regulatory objection in Europe can force a platform to stop, at least temporarily. No comparable pause happened in jurisdictions without equivalent regulatory pressure.
For publishers, the stakes are somewhat different from individual users. A publisher's concern is not personal data but intellectual property: content scraped and used to train a model that then competes with the publisher's own output. GDPR objection rights do not reach that far. The competition law complaints filed with the European Commission and the CMA address that difference, arguing that Meta's terms constitute an abuse of market power. Those complaints move more slowly than a GDPR objection and they operate through regulators rather than individual action, which means a publisher waiting on an outcome from either body will be waiting considerably longer than a user who files directly through Meta's settings.
The practical situation for EU and UK users is that the objection right is real, the mechanism exists, and there is precedent for it working. For everyone else, the terms apply on Meta's schedule.