Meta's Revised Terms Still Permit AI Training, Legal Experts Warn
What happened
Meta revised its business account terms to drop explicit language about using scraped web content to 'train' AI models, a change that followed criticism from news publishers. The update was analyzed in a Nieman Lab report via The Verge published October 22, 2026. Cornell Law professor James Grimmelmann and media attorney Matt Topic both told Nieman Lab that the word 'develop' is wide enough to encompass model training. They noted this word remains in the revised terms. They also said robots.txt signals are not contractually binding under the new terms. Publishers use these signals to tell web crawlers not to copy their content. The signals may provide no legal protection. Meta maintained that it continues to honor robots.txt preferences, but the outside legal analysis directly contradicts the idea that publishers have gained meaningful protection. This follows earlier coverage of Meta's October 30 Terms Shift Training Data Liability to Publishers, which addressed a related but distinct terms change event.
Why it matters
- ·Organizations that publish web content may have no contractual basis for assuming robots.txt signals or revised platform terms protect them from AI training use. This increases their exposure to data-use disputes.
- ·Compliance teams that reviewed Meta's earlier terms change as a sufficient safeguard may need to reopen that assessment. Expert analysis suggests the revised language does not materially narrow Meta's rights to use scraped content.
- ·The gap between a vendor's public announcement and what its terms actually permit is a vendor due diligence failure point. Legal teams should not treat press-release-level assurances as a substitute for independent review of the actual contract language.
Governance controls affected
What to do now
- ☐Have your legal team review Meta's current business account terms directly, focusing on whether the word 'develop' or similar broad language could cover AI model training under applicable law.
- ☐Ask your legal and procurement teams whether any existing agreements with Meta or similar platforms include explicit, enforceable prohibitions on using your content for AI training, rather than relying on robots.txt signals.
- ☐Audit which of your organization's web-published content, including news feeds, articles, or data, may be accessible to Meta's crawlers, and assess whether that exposure is acceptable given the unresolved legal questions.
- ☐Update your vendor due diligence process to require independent legal review of terms changes at major AI platform vendors, not just acceptance of the vendor's own characterization of what changed.
- ☐If your organization has content licensing agreements or is considering them, ask counsel whether those agreements would override broad platform terms of the kind described here.
What to watch next
Courts have not yet resolved whether broad 'develop' language in platform terms authorizes AI training on scraped content, and litigation involving scraped training data is active across multiple jurisdictions. Compliance teams should monitor clarifying rulings or enforcement actions under the FTC Enforcement on AI (Section 5 of the FTC Act). They should also watch any legislative movement that would give robots.txt signals statutory force. Publisher trade groups are pressing for explicit licensing requirements, and any shift in that direction would require rapid contract and terms review across organizations with significant web-published content.
Stay ahead of stories like this
Get every US AI governance development like this one, plus the rest of the week's developments. Every Thursday.
Recent issues
- Regulators, litigants, and attackers are all moving faster than most organizations' AI governance frameworks, shifting leverage away from deployers and toward those who can prove control, accountability, and honest disclosure.21 Oct
- Three separate incidents this week reveal that AI vendors cannot be trusted to self-police, and that harm from deployed agents can run unchecked for months before anyone inside the organization notices.15 Oct
Free every Thursday. Unsubscribe anytime.
