Meta scans your photos: How to protect your data now!

Meta scans your photos: How to protect your data now!

Since May 2025 there has been a new feature on Facebook and Instagram that could have the alarm bells ring for some users. Meta, the parent company of Facebook, has announced that it can use user data to improve its artificial intelligence. But that only happens if the users do not explicitly contradict. When editing Stories, Facebook asks whether the so-called "cloud processing" should be activated. In the event of approval, media can be uploaded directly to the META servers, whereby Facebook itself decides which images are affected. Cybersecurity expert Caitlin Sarian emphasizes that FB could even access non-uploaded photos, which could significantly endanger the privacy of users. By accepting the pop-up window, users agree to the conditions for using their pictures by the AI.

With the confirmation, it is agreed that Facebook stores and processes personal information. Faces, places of recording and time stamps are also recorded. Meta itself explains that no pictures are currently being used for the AI ​​models without giving more details about future use. So far, this feature has only been tested in the USA and Canada, but requires the express consent of the users. If you want to deny Facebook access to private smartphone photos, you can do this by clicking on "not agreeing" during pop-up. Caitlin Sarian recommends to limit access to photos for Facebook for better security and gives tips on changing the authorizations in the settings.

The data protection guidelines in change

But that's not all that Meta users should consider. As early as June 2024, the company introduced new data protection guidelines that raise the collecting of data to a new level. After a wave of protests, AI training in Europe was suspended until May 2025. From then on, however, the use of the content will also begin there. Theoretically, users have the opportunity to object to data use and could even take legal action against Meta. However, there are some hurdles here: Forms for refusal to data are no longer available, unless the user has no meta account.

In order to find out about the merger of the terms of use and the data protection guidelines, it should be noted that Facebook and Instagram have been running under the same conditions since July 2022. The data protection guideline of WhatsApp is also separate and does not apply to the platforms mentioned above. According to META, a variety of data is recorded - even by users who do not actively use the products. Offline activities are also followed, which leads to an even more comprehensive data profile. In the event that users want to reduce personalized advertising, there are ways to vary the email addresses and adapt the browser settings to delete cookies.

The legal shadows and new challenges

The focus of “legitimate interest” is at the center of all discussions. According to Article 6 of the General Data Protection Regulation (DSVO), META may process personal data if business interests are in the foreground. This procedure was accepted by the Cologne Higher Regional Court in relation to the training of large AI models. However, consumer advice centers criticize the procedure of META and demand active consent of the users instead of mere objection. The well -known data protection activist Max Schrems from the organization NOYB sees a clear violation of European law and plans to take action against Meta to protect the rights of users.

For more information you can report the reports on Image , Consumer center NRW and WDR read.