AI Governance Institute
← News
Enforcement2026-11-06

CMA Probe Into Meta's AI Content Terms Puts Training Data Rights on the Competition Agenda

Source

UK's CMA opens investigation into Meta's terms

Competition and Markets Authority

Via Competition and Markets Authority

What happened

The UK's Competition and Markets Authority (CMA) opened an investigation into Meta's proposed commercial terms governing how business-generated content may be used to develop AI tools. The probe examines whether Meta's platform market position allows it to impose take-it-or-leave-it conditions on UK businesses with no meaningful ability to negotiate or opt out. This follows earlier revisions to Meta's terms that legal experts said still permitted AI training on user and business content. The CMA's concern is that the terms lack adequate transparency about what content is captured and how it will be used. The investigation does not allege a specific legal breach. It signals that regulators now view AI training data acquisition as a competition issue, not only a privacy or copyright matter.

Why it matters

  • ·Competition regulators are now scrutinizing whether AI training data is acquired through fair commercial terms. This creates a new category of vendor regulatory risk that standard privacy reviews do not capture. Enterprises using Meta AI products should account for this exposure.
  • ·UK businesses that publish content on Meta platforms may have accepted terms that transfer AI training rights without meaningful consent or bargaining power, creating a contractual exposure that legal and procurement teams need to review now.
  • ·The investigation reinforces a pattern visible in Italy's antitrust probe into Suno's AI music platform terms. It signals that regulators across jurisdictions are developing coordinated appetite for scrutinizing how AI providers acquire content rights from dependent business users.

Stay ahead of stories like this

Get every UK AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Free every Thursday. Unsubscribe anytime.

Governance controls affected

DGC-001Training Data ProvenancePRC-001AI Vendor Due DiligencePRC-002AI Contractual RequirementsPRC-018Vendor Regulatory and Legal Exposure Notification StandardCMP-001Multi-Jurisdiction AI Regulatory Compliance Mapping

What to do now

  • ☐Review your organization's current Meta platform agreements to identify any clauses that grant Meta rights to use your business content for AI training or product development.
  • ☐Ask your legal team whether your existing vendor contracts with Meta AI products include provisions allowing you to audit or restrict how your data or content is used to train AI models.
  • ☐Flag Meta as a vendor with active regulatory exposure in your AI vendor risk register, and check whether your vendor monitoring process covers competition-law investigations, not just data-protection enforcement.
  • ☐If your organization publishes content through Meta platforms on behalf of clients or third parties, assess whether those parties have been notified of the potential for their content to be used in AI training.
  • ☐Survey your procurement team to identify any other AI vendors whose terms were accepted at scale without negotiated data-use limits, and prioritize those for contract review.

What to watch next

The CMA's investigation is at an early stage, and a formal decision on whether to proceed to enforcement could take months. Compliance teams should monitor whether the CMA issues interim guidance on acceptable AI content terms. They should also watch for coordination with the EU's AI Office, which has parallel authority over general-purpose AI model training data under the EU AI Act (Regulation (EU) 2024/1689). Broader legislative movement in the UK on platform market power and AI is also relevant: any new statutory framework for AI content licensing would affect Meta's terms directly. The EU General-Purpose AI Model Training Data Public Summary Template is already in force and may serve as a comparator for what transparency regulators expect.

Related Coverage

Enforcement2026-11-03

NYT Lawsuit Names Anthropic, Mistral, and xAI as Downstream Scraped-Data Consumers

The New York Times and three other publishers filed suit against Brave Software. They allege Brave scraped copyrighted content without authorization and sold index access to AI companies including Anthropic, Perplexity, Mistral, xAI, and Cohere. The complaint also charges Brave with helping users bypass publisher paywalls. For compliance teams, the case makes the intermediary layer of the AI data supply chain a live legal exposure.

Standards2026-10-31

Major Labs Back Unified Scraping Opt-Out, Creating New Vendor Due Diligence Obligations

OpenAI, Google, Microsoft, and Anthropic have committed to a shared technical signal proposed through the Internet Engineering Task Force (IETF). It lets website publishers opt out of AI training data collection using a single instruction in their existing robots.txt file. Anthropic has already adopted the signal. Google, Microsoft, and OpenAI plan to follow in the coming months. Microsoft will also allow publishers to distinguish between opting out of AI training and opting out of AI grounding. AI grounding is the use of live web content to inform AI answers in real time.

Corporate Policy2026-10-30

Wikimedia's NYT v. OpenAI Brief Draws a Copyright Line AI Buyers Must Track

The Wikimedia Foundation filed an amicus brief in the New York Times v. OpenAI and Microsoft litigation, arguing that pre-training AI on copyrighted works may qualify as fair use, but that AI systems reproducing content verbatim in outputs require a license. The brief introduces a specific two-part framework that, if adopted, would materially change how enterprises assess legal risk in AI procurement and deployment. The case remains pending, but the distinction Wikimedia draws is already relevant to compliance programs today.