Meta shifts AI liability to customers in new commercial terms
Meta’s updated terms, effective October 30, make enterprise clients liable for AI errors and expand data scraping rights.
Key points
- Enterprise customers become legally responsible for mistakes made by Meta’s AI models.
- Meta asserts the right to crawl domains associated with its business accounts.
- The company states it is rethinking the web scraping provisions after industry concern.
Meta is updating its commercial terms to shift legal liability for artificial intelligence errors directly to its enterprise customers. These changes, which are scheduled to take effect on October 30, also expand the company’s rights to access and use content linked to business accounts.
According to Computerworld, the new language holds IT executives accountable for actions taken by partners or contractors using Meta’s services. The terms also grant Meta broad permissions to use automated software, including bots and crawlers, to access and analyze domains associated with customer products.
Context on Data Access
The proposed terms allow Meta to create test credentials and periodically pull updates from customer domains. The company states this data collection is intended to develop and improve advertising and business products. Consultants identified web scraping, data ownership, and AI liability transfer as the three primary concerns regarding these updates.
The data ownership issue sets Meta apart from other AI vendors in that it wants to train its models on anything it encounters. The nature of Meta’s businesses focuses on advertising and would therefore be expected to seek more data control.
Who Is Affected
Enterprise customers using Meta’s business and advertising products are the primary group affected by these contractual changes. The new terms specifically target organizations that utilize Meta’s AI models or maintain business accounts linked to external domains. IT leaders must now assume responsibility for third-party actions and AI-generated outputs within their organizations.
Despite the initial announcement, Meta indicated it was reconsidering its stance on web scraping. Emil Vazques, a Meta public affairs manager, emailed a statement to CIO.com suggesting the company wanted to clarify the specific scope of the crawling terms.
What should you do?
Vazques stated that the consolidated crawling terms only apply to ads and business products, not general web scraping. He emphasized that content owners can still use robots.txt to signal their preferences and that the updates do not supersede those signals. As of Monday evening, the proposed document had not yet been updated to reflect this clarification, but Vazques said changes were coming soon.
What to do and how to stay safe: Meta
- Review the updated commercial terms before the October 30 effective date to understand new liability clauses.
- Verify if your organization’s domains are associated with Meta business accounts to assess scraping exposure.
- Monitor Meta’s official channels for the promised clarification regarding web crawling and robots.txt preferences.
- Consult legal counsel to evaluate the risk of assuming liability for third-party contractor actions and AI outputs.
Step-by-step guide: Prompt Injection Warning Signs: How to Spot AI Manipulation
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
When do Meta’s new commercial terms take effect?
The new commercial terms are scheduled to kick in on October 30.
Does Meta still allow content owners to use robots.txt?
Yes, Meta states that content owners can still use robots.txt to signal their preferences for web crawlers.
Who is liable for AI mistakes under the new terms?
Enterprise customers and their IT executives will be held legally responsible for mistakes made by Meta’s AI models.
