Vendor Details: Facebook Ads

Facebook provides state-specific processing terms for California, which are available here. Facebook states that it will act as a "service provider" under the CCPA when Limited Data Use (LDU) is enabled. You can read more about LDU at the links below:

• Data Processing Options for Users in California
• Limiting How Data is Used for People in California

Based on Facebook's documentation, Facebook is a "third party" and not a "service provider" to any business that uses the following services but does not have LDU turned on:

• Facebook Pixel
• Conversion API
• App Events via Facebook SDK
• App Events API
• Offline Conversions
• Audience Network Ad Request and Bidding via Audience Network SDK
• Lookalike Audiences

Note that classifying a vendor as a "third party" will generally trigger opt-out rights unless an exception to selling applies. That is because "third parties" under the CCPA are not limited in how they use your business's customers' data. You can read more about classifying vendors as a "service provider" and why sharing information with "third parties" may trigger a "sale" of information here. 

This content is provided for general informational purposes only and does not constitute legal advice. This content is not a substitute for obtaining legal advice from a licensed attorney. The information on this page may be changed without notice and is not guaranteed to be complete, correct or up-to-date, and may not reflect the most current legal developments.