이번 보고서
2025 연차보고서
10-K · 기간 말 2025. 12. 31. · 제출 2026. 1. 29.
비교 기준
2024 연차보고서
10-K · 기간 말 2024. 12. 31.
0
새 리스크 항목
1
신규 문단
55
수정 문단
13
삭제
+4%
분량 변화
AI 한국어 요약
한 줄 요약
Meta는 AI(초지능 포함) 투자를 계속 늘리겠다고 밝히며 이를 위한 외부 자금조달 가능성을 새로 언급했습니다. 동시에 AI 저작권 소송, 청소년 관련 소송, EU 광고 모델 규제 리스크를 더 구체적이고 무겁게 서술했습니다.
주목할 변화
- 신규AI 투자 확대와 외부 자금조달·희석 가능성투자 재원 마련을 위해 부채나 지분 발행 등 외부 자금조달을 할 수 있다는 문단이 새로 생겼습니다. 이자비용 증가와 주주 지분 희석 위험도 함께 명시했습니다("may also seek to raise additional capital through debt, equity"). 인재 확보용 대규모 주식 보상도 가정형("if we issue")에서 현재형("From time to time we issue significant equity")으로 바뀌었습니다.
- 강화EU '광고 없는 구독' 모델 위법 결정유럽집행위원회가 2025년 4월 해당 모델이 규정에 맞지 않는다는 최종 결정을 내렸다는 내용이 추가됐습니다. 회사는 항소 중이지만 추가 수정이 강제될 수 있으며, 그 경우 유럽 매출에 큰 영향이 있을 수 있다고 밝혔습니다("significant impact to our European business and revenue").
- 강화AI 학습 데이터 저작권 소송미국·유럽·캐나다 등에서 AI 학습과 출력물을 둘러싼 저작권 소송이 진행 중이라고 구체적으로 적었습니다. 미국 법정손해배상은 저작물 1건당 산정되기 때문에 배상액이 막대해질 수 있다고 경고했습니다("particularly given the large volumes of data required to train AI models"). 무단 스크래핑 데이터 관련 소송도 새로 언급됐습니다.
- 강화청소년 관련 소송·규제청소년 관련 소송의 대표 재판(bellwether trial)이 2026년 이후 예정돼 있다고 처음 밝혔습니다. 청소년 관련 소송과 청구가 늘고 있다는 점도 인정했습니다("We have seen an increase in litigation"). 그 밖에 다음 내용이 추가됐습니다.
- AI 챗봇에 대한 FTC·의회·주 법무장관의 조사
- EU 회원국들의 연령 확인 의무화·미성년자 접근 금지 논의
- 호주의 16세 미만 SNS 금지
- 강화AI 전략 성공 불확실성과 경쟁투자 대상에 'superintelligence'가 추가됐습니다. AI 전략이 "may not be successful in the foreseeable future, or at all"이라는 문장과 제품 로드맵을 수시로 크게 바꾼다는 설명도 새로 들어갔습니다. 경쟁 항목에는 프런티어 AI 모델 개발 경쟁("frontier AI models")과 AI 인재 확보 경쟁이 명시됐습니다.
- 강화AI 관련 보안 위험AI 도입으로 새로운 취약점이 생길 수 있다는 내용이 추가됐습니다. 프롬프트 인젝션, AI 에이전트 오류, 소스코드·모델 가중치 유출("compromise of... source code, model weights")이 예로 들어졌습니다. AI로 작성한 소프트웨어의 버그 위험도 새로 포함됐습니다.
- 강화세제 변화(OBBBA·CAMT)2025년 7월 제정된 OBBBA 이후 법인 최저한세(CAMT) 때문에 주식보상 관련 초과 세금 혜택을 실현하지 못할 수 있다고 새로 명시했습니다. OECD 논의가 멈춘 상황에서 디지털서비스세 같은 국가별 일방 과세가 확산될 수 있다는 우려도 추가됐습니다.
- 완화Reality Labs 손실 전망지난 보고서에서는 손실이 "increase"할 것으로 예상했지만, 이번에는 2026년 손실이 "remain similar to 2025" 수준일 것으로 표현이 바뀌었습니다. 사업 설명에서는 'metaverse'와 'mixed reality' 표현이 빠지고 VR, Horizon, 웨어러블 중심으로 정리됐습니다.
읽는 법
리스크 서술의 무게중심이 메타버스에서 AI로 확실히 옮겨갔습니다. AI는 투자 부담(자금조달·희석), 법적 책임(저작권·청소년·제조물책임), 보안 등 여러 측면에서 새 리스크 요인으로 등장했습니다. EU 광고 모델 결정과 2026년 청소년 소송 재판처럼 일정과 결과가 구체화된 사안이 늘었으므로, 향후 공시에서 해당 사건들의 진행 상황을 이어서 확인할 필요가 있습니다.
원문 비교
- Our ability to support these investments is dependent on generating sufficient profits from other areas of our business. From time to time we may also seek to raise additional capital through debt, equity, or other financing arrangements to support our business operations, strategic initiatives, or other corporate purposes. Such financings may not be available on favorable terms or at all. The incurrence of additional debt also results in increased fixed obligations and interest expense, while the issuance of additional equity securities results in dilution to our stockholders. If we are unable to obtain adequate financing when needed, our ability to finance our business operations and initiatives could be adversely affected.
- •complex and evolving U.S. and foreign privacy, data use, data combination, data protection, content and content moderation, competition, youth, safety, consumer protection, advertising, and other laws and regulations, including the General Data Protection Regulation (GDPR), Digital Markets Act (DMA), Digital Services Act (DSA), UK Online Safety Act (OSA), Artificial Intelligence Act (EU AI Act), and the UK Digital Markets, Competition and Consumer Act (DMCC);
- The size of our active user base and our users' level of engagement across our products are critical to our success. Our financial performance has been and will continue to be significantly determined by our success in adding, retaining, and engaging active users of our products that deliver ad impressions, particularly for Facebook and Instagram. We have experienced, and expect to continue to experience, fluctuations and declines in the size of our active user base in one or more markets from time to time, particularly in markets where we have achieved higher penetration rates. User growth and engagement are also impacted by a number of other factors, including competitive products and services, such as TikTok, that have reduced some users' engagement with our products and services, as well as global and regional business, macroeconomic, and geopolitical conditions.
In addition,For example, in connection with the war in Ukraine, access to Facebook and Instagram was restricted in Russia and these services were then prohibited by the Russian government, which contributed to slight decreases in the size of our active user base following the onset of the war. Any future declines in the size of our active user base may adversely impact our ability to deliver ad impressions and, in turn, our financial performance. - •there is decreased engagement with our products, decreased efficiency of our advertising products, or failure to accept our terms of service, as part of changes that we have implemented or may implement in the future, whether voluntarily, in connection with the GDPR, the European Union's ePrivacy Directive, the DMA, the DSA, the DMCC, U.S. state privacy
laws including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA),laws, youth social media laws, or other laws, regulations, or regulatory actions, or otherwise; - •the impact of macroeconomic and geopolitical conditions, whether in the advertising industry in general, or among specific types of marketers or within particular geographies, which in turn can have broader effects in other regions (for example, the war in Ukraine and service restrictions imposed by the Russian government have adversely affected our advertising business in Europe and other regions, and advertiser spending also
can beis subject to adverse effects from conflicts in the Middle Eastorand the implementation of tariffs or other existing or future trade policies by the United States, China,orand other governments). - Our ad targeting and measurement tools rely on data signals from user activity on websites and services that we do not control, as well as signals generated within our products, in order to deliver relevant and effective ads to our users, and any changes in our ability to use such signals will adversely affect our business. For example, legislative and regulatory developments, such as the GDPR, ePrivacy Directive, DMA, and U.S. state privacy laws,
including the CCPA,have impacted, and we expect will continue to impact, our ability to use such signals in our ad products. In particular, we have seen increases in the number of users opting to control certain types of ad targeting in Europe following product changes implemented in connection with our GDPR and ePrivacy Directive compliance, and we have introduced product changes that limit data signal use forcertainusers inCaliforniacertain U.S. states following adoption ofthe CCPA.state privacy laws.OtherA number of U.S. state privacylaws, such as the Texas Data Privacy and Security Act, the Colorado Privacy Act, and the Oregon Consumer Privacy Act, are introducinglaws have introduced additional rights for users and could result in restrictions on our use of signals from third-party apps and websites through certain browser- and device-based universal opt-out mechanisms. Judicial and regulatory guidance, decisions, or enforcement actions, or new legislation in these or other jurisdictions may require us to make additional changes to our products in the future that further reduce our ability to use these signals, which has occurred in the past. For example, in response to regulatory developments in Europe, we announced plans to change the legal basis for behavioral advertising on Facebook and Instagram in the European Union, European Economic Area, and Switzerland from "legitimate interests" to "consent," and in November 2023 we began offering users in the region a "subscription for no ads" alternative. We are engaging with regulators on our consent model, including regarding compliance with requirements under the GDPR, DMA, and EU consumer laws. For example, in March 2024, the European Commission opened formal proceedings regarding the compliance of our "subscription for no ads" model with requirements under the DMA, and it issued preliminary findings in July 2024. In addition, the European Data Protection Board has published an opinion on the operation of such models under GDPR and European consumer protection organizations have raised concerns regarding our compliance with consumer protection laws. In response to these developments, in November 2024, we began offering users in the European Union, European Economic Area, and Switzerland who elect to continue using our services free-of-charge, supported by ads, an option to see less personalizedads,ads (LPA), which areexpected to beless relevant and effective than our premium ad offerings. In April 2025, the European Commission issued a final decision that our "subscription for no ads" model does not comply with such requirements. We made significant modifications to LPA since the European Commission issued its final decision. We have appealed the European Commission's decision but further modifications to our model may be imposed during the appeal process, which could result in a materially worse user experience for European users and a significant impact to our European business and revenue. - Our ability to retain, increase, and engage our user base and to increase our revenue depends heavily on our ability to continue to evolve our existing products and to create successful new products, both independently and in conjunction with developers or other third parties. We may introduce significant changes to our existing products or acquire or introduce new and unproven products, including using technologies with which we have little or no prior development or operating experience. For example, we have relatively limited experience with consumer hardware products and
virtual, augmented,virtual andmixedaugmented reality technology, which may adversely affect our ability to successfully develop and market these evolving products and technologies. We are also making significant investments in artificial intelligence (AI) initiatives across our business. For example, we continue to launch new AI features on our products, including support for new modalities, conversational AIs,stickers andAI profiles, stickers, photos, videos, and editing tools. We continue to incur substantial costs, and we may not be successful in generating profits, in connection with these efforts. - In addition, we have invested, and expect to continue to invest, significant resources in growing our messaging products to support increasing usage of such products. We have historically monetized messaging in only a limited fashion, and we may not be successful in our efforts to generate meaningful revenue or profits from messaging over the long term.
OurIn addition, our efforts to implement default end-to-end encryptionacross our messaging services on Facebook and Instagramhave been subject to governmental and regulatory scrutiny in multiple jurisdictions. For example, the Nevada Attorney General is seeking to enjoin our offering of default end-to-end encryption on Messenger for all Nevada residents under the age of 18. - We
are makinghave made significant investments in AI initiatives, including generativeAI,AI and superintelligence, to, among other things, recommend relevant content across our products, enhance our advertising tools, develop new products, and develop new features for existingproducts.products, and expect to continue to increase these investments. In particular, we expect our AI initiatives will require increased investment in infrastructure and headcount. If our investments are not successful longer-term, our business and financial performance could be harmed. - There are significant risks involved in developing and deploying AI and there can be no assurance that the usage of AI will enhance our products or services or be beneficial to our business, including our efficiency or profitability. For example, our AI-related efforts, particularly those related to generative
AI,AI and superintelligence, subject us to risks related to harmful or illegal content, accuracy, misinformation and deepfakes (including related to elections), bias, discrimination, toxicity, consumer protection, products liability, intellectual property infringement or misappropriation, defamation, data privacy, cybersecurity, and sanctions and export controls, among others. It is also uncertain how various laws related to online services, intermediary liability, and other issues will apply to content generated by AI. In addition, we are subject to the risks of new or enhanced governmental or regulatoryscrutiny,scrutiny and enforcement, litigation, or other legal liability, ethical concerns, negative consumer perceptions as to automation and AI, activities that threaten people's safety or well-being on- or offline, including with respect to younger users, or other societal harms or complications that could adversely affect our business, reputation, or financial results. For example, we have been the subject of media and government scrutiny relating to AI and AI chatbots, including inquiries and investigations by the FTC, members of Congress and state attorneys general. - As a result of the complexity and rapid development of AI, it is also the subject of evolving review and investigation by various governmental and regulatory agencies in jurisdictions around the world, which are applying, or are considering applying, platform moderation, intellectual property, products liability, cybersecurity, export controls, consumer protection, and data protection laws to AI and/or are considering general legal frameworks on AI (such as the
recently passedEU AI Act). We may not always be able to anticipate how courts and regulators will apply existing laws to AI, predict how new legal frameworks will develop to address AI, or otherwise respond to these frameworks as they are still rapidly evolving. We may also have to expend resources to adapt to new legal frameworks, and adjust our offerings in certain jurisdictions if the legal frameworks on AI are not consistent across jurisdictions. - Further, we face significant competition from other companies that are developing their own AI features and technologies, including competition from AI features and technologies that may be similar or superior to our technologies or more cost-effective to develop and deploy, or that otherwise achieve more timely or successful market acceptance. Given the long history of development in the AI sector, other parties may have (or in the future may obtain) patents or other proprietary rights that would prevent, limit, or interfere with our ability to make, use, or sell our own AI features. Our AI initiatives also depend on our access to data to effectively train our models, which is subject to risks related to the availability or costs of data, regulatory or other legal developments, or other factors, as well as our ability to attract and retain specialized personnel in a limited and competitive talent market. Further, our ability to continue to develop and effectively deploy AI technologies is dependent on access to specific third-party
equipmentequipment, technology, and other technical and physical infrastructure, such as processing hardware, network capacity, models, computing power, and related energy requirements, as to which we cannot control the availability or pricing, especially in a highly competitive environment. - It is not possible to predict all of the risks related to the use of AI and changes in laws, rules, directives, and regulations or other regulatory developments regarding the use of AI, including restrictions around the collection and use of data, may adversely affect our ability to develop and use AI or subject us to legal liability. In addition, AI may not develop in accordance with our expectations, and market acceptance of features, products, or services we build is uncertain. We regularly evaluate our product roadmaps and make significant changes as our understanding of the technological challenges and market landscape of AI, as well as our product ideas and designs, continue to evolve. As a result of these or other factors, our AI strategy and investments may not be successful in the foreseeable future, or at all, which could adversely affect our business, reputation, or financial results.
- We believe the metaverse, an embodied internet where people have immersive experiences beyond two-dimensional screens, is the next evolution in social technology. In 2021, we announced a shift in our business and product strategy to focus on helping to bring the metaverse to life, and we are directing our efforts toward innovations in AI, wearables, and devices to help build next-generation interfaces. We expect this will be a complex, evolving, and long-term initiative that will involve the development of new and emerging technologies, continued investment in infrastructure as well as privacy, safety, and security efforts, and collaboration with other companies, developers, partners, and other participants. However, the metaverse may not develop in accordance with our expectations, and market acceptance of features, products, or services we build is uncertain. We regularly evaluate our product roadmaps and make significant changes as our understanding of the technological challenges and market landscape and our product ideas and designs evolve. In addition, we have relatively limited experience with consumer hardware products and
virtual, augmented,virtual andmixedaugmented reality technology, which may enable other companies to compete more effectively than us. We may be unsuccessful in our research and product development efforts, including if we are unable to develop relationships with key participants in the metaverse or develop products that operate effectively with metaverse technologies, products, systems, networks, or standards. For example, some of our consumer hardware products depend on the ability to operate with third-party mobile platforms and these platforms do not necessarily provide our products with the same levels of interoperability that they provide to their own competing products. In addition, our Reality Labs efforts may also divert resources and management attention from other areas of our business. We expect to continue to make significant investments invirtual, augmented,virtual andmixedaugmented reality and other technologies to support these efforts, and our ability to support these efforts is dependent on generating sufficient profits from other areas of our business. In addition, as our Reality Labs efforts evolve, we may be subject to a variety of existing or new laws and regulations in the United States and international jurisdictions, including in the areas of privacy, safety, AI, competition, content regulation, medical devices, tariffs, export controls, consumer protection, and e-commerce, which may delay or impede the development of our products and services, increase our operating costs, require significant management time and attention, or otherwise harm our business. - Maintaining and enhancing our brands will require us to make substantial investments and these investments may not be successful. Certain of our actions, such as the foregoing matter regarding developer misuse of data and concerns around our handling of political
speech and advertising,speech, hate speech, and other content, advertising, and deceptive activity on our platform, as well as user well-being issues, have eroded confidence in our brands and may continue to do so in the future. If we fail to successfully promote and maintain our brands or if we incur excessive expenses in this effort, our business and financial results may be adversely affected. - We may not be able to continue to successfully maintain or grow engaging third-party content on our platform or usage of and engagement with applications that integrate with our products.
- We have made and are continuing to make investments to enable creators to contribute engaging third-party content to our platform and developers to build, grow, and monetize applications that integrate with our products. From time to time we make product changes and offer tools to promote creative content on our platform, but we may not be successful in obtaining or attracting engaging third-party content.
SuchIn addition, existing and prospective developers may not be successful in building, growing, or monetizing applications that create and maintain user engagement.Additionally, developersDevelopers may also choose to build on other platforms, including platforms controlled by third parties, rather than building products that integrate with our products. We are continuously seeking to balance the distribution objectives of our developers with our desire to provide an optimal user experience, and we may not be successful in achieving a balance that continues to attract and retain such developers. For example, from time to time, we have taken actions to reduce the volume of communications from these developers to users on our products with the objective of enhancing the user experience, and such actions have reduced distribution from, user engagement with, and our monetization opportunities from, applications integrated with our products. In addition, as part of our efforts related to privacy, safety, and security, we conduct investigations and audits of platform applications from time to time, and we also have announced several product changes that restrict developer access to certain user data. In some instances, these actions, as well as other actions to enforce our policies applicable to developers, have adversely affected, or will adversely affect, our relationships with developers. If we are not successful in our efforts to maintain or grow engaging third-party content on our platform or the number of developers that choose to build products that integrate with ourproductsproducts, or if we are unable to continue to build and maintain good relations with such developers, our user growth and user engagement and our financial results may be adversely affected. - We compete with companies providing connection, sharing, discovery, and communication products and services to users online, as well as companies that sell advertising to businesses looking to reach consumers and/or develop tools and systems for managing and optimizing advertising campaigns. We face significant competition in every aspect of our business, including, but not limited to, companies that facilitate the ability of users to create, share, communicate, and discover content and information online or enable marketers to reach their existing or prospective audiences. We compete to attract, engage, and retain people who use our products, to attract and retain businesses that use our free or paid business and advertising services, and to attract and retain developers who build compelling applications that integrate with our products. We also compete with companies in the development and application of AI, particularly with respect to the development of frontier AI models, as well as the development and delivery of consumer hardware and augmented and virtual reality products and services. We also expect to face additional competition as we introduce or acquire new products, as our existing products evolve, or as other companies introduce new products and services, including as part of efforts to innovate through the development and application of AI and other new technologies, as well as efforts to develop the metaverse.
- •our ability to establish and maintain creator and publisher interest in integrating their content with our products;
- •costs related to
acquisitions,acquisitions or other strategic transactions, including costs associated with amortization and additional investments to developtheacquired technologies; - •charges associated with impairment or abandonment of any assets on our balance sheet, including as a result of changes to our real property lease arrangements and data center and infrastructure assets;
- •changes in the legislative or regulatory environment, including with respect to privacy, data protection, consumer protection, antitrust, content, or AI, or actions by governments or regulators, including fines, orders, or consent decrees;
- •fluctuations in the market values of our investments in marketable securities, in the valuation of our non-marketable equity
securities,investments, and in interest rates; - We receive a high degree of media coverage around the world. Our reputation has been, and could in the future be, adversely affected by unfavorable publicity regarding, for example, our privacy practices, advertising policies, product decisions, product quality, litigation or regulatory activity, government surveillance, the actions of our advertisers, the actions of our developers whose products are integrated with our products, the use of our products or services for illicit or objectionable ends, the substance or enforcement of our community standards, terms of service, or other policies, the actions of our users, the quality and integrity of content shared on our platform, the perceived or actual impacts of our products or services on user well-being, including for younger users, our management, or the actions of other companies that provide similar services to ours. For example, we have been the subject of significant media coverage involving concerns around our handling of political
speech and advertising,speech, hate speech, and other content, advertising, and deceptive activity on our platform, as well as user well-being issues, and we continue to receive negative publicity related to these topics. Beginning in September 2021, we became the subject of significant media coverage as a result of allegations and the release of internal company documents by a former employee. In addition, we have been, and may in the future be, subject to negative publicity in connection with our handling of misinformation and other illicit or objectionable use of our products or services, including in connection with geopolitical events and elections in the United States and around the world. We have also been, and expect to continue to be, subject to media coverage in connection with litigation matters. For example, several bellwether trials in our youth-related litigation matters are scheduled for 2026 and beyond. Any such negative publicity could have an adverse effect on the size, engagement, and loyalty of our user base and marketer demand for advertising on our products, which could result in decreased revenue and adversely affect our business and financial results, and we have experienced such adverse effects to varying degrees from time to time. - We are subject to the risk of public health crises such as pandemics, earthquakes, adverse weather conditions, other natural disasters, terrorism, geopolitical conflict, other physical security threats, power loss, cyber-attacks, and other catastrophic events and crises. For example, the COVID-19 pandemic previously significantly impacted our business and results of operations. In particular, the pandemic led to volatility in the demand for and pricing of our advertising services at various points throughout the pandemic, and we may experience similar effects in the future as a result of
the pandemic orother catastrophic events. Such events also expose our business, operations, and workforce to a variety of other risks, including: volatility in the size of our user base and user engagement; delays in product development or releases, or reductions in manufacturing production and sales of consumer hardware, as a result of inventory shortages, supply chain or labor shortages; significant volatility and disruption of global financial markets, which could cause fluctuations in currency exchange rates or negatively impact our ability to access capital in the future; illnesses to key employees, or a significant portion of our workforce, which may result in inefficiencies, delays, and disruptions in our business; and increased volatility and uncertainty in the financial projections we use as the basis for estimates used in our financial statements. Any of these developments may adversely affect our business, harm our reputation, or result in legal or regulatory actions against us. - We incur significant expenses in operating our business, and we expect our expenses to continue to increase in the future as we continue to invest in new and unproven technologies, including AI and machine learning, as we broaden our user base, as users increase the amount and types of content they consume and the data they share with us, for example with respect to video, as we develop and implement new products, as we market new and existing products and promote our brands, as we continue to expand our technical infrastructure,
as we continue to invest in new and unproven technologies, including AI and machine learning,and as we continue our efforts to focus on privacy, safety, security, and content and advertising review and enforcement. We have previously undertaken cost reduction measures in light of a more challenging operating environment, which may adversely affect these or other business initiatives, and some of these measures have involved, and may in the future involve, up-front charges and outlays of cash to reduce certainlonger- termlonger-term expenses. In addition, from time to time we are subject to settlements, judgments, fines, or other monetary penalties in connection with legal and regulatory developments that may be material to our business. - We have made significant investments in AI initiatives, including investments in infrastructure and headcount, including specialized technical personnel, to support our efforts to enhance our products, features, and advertising tools, as well as to develop and train our AI models, and expect to continue to increase these investments. We are also continuing to increase our investments in new platforms and technologies, including as part of our
metaverseVR, Horizon, and wearables efforts. Some of these investments, particularly our significant investments in Reality Labs, have generated only limited revenue and reduced our operating margin and profitability, and we expect the adverse financial impact of such investments to continue for the foreseeable future. For example, our investments in Reality Labs reduced our20242025 overall operating profit by approximately$17.73$19.19 billion, and we expect our 2026 Reality Labsinvestments andoperating losses toincrease inremain similar to 2025. If our investments are not successful longer-term, our business and financial performance will be harmed. - We have designed and built our own data centers and key portions of our technical infrastructure through which we serve our products, and we plan to continue to significantly expand the size of our infrastructure primarily through data centers, subsea and terrestrial fiber optic cable systems, and other projects. The infrastructure expansion we are undertaking is complex and involves projects in multiple locations around the world, including in developing regions that expose us to increased risks relating to anti-corruption compliance, trade compliance, environmental, health, and safety compliance, and political challenges, among others. We have changed, suspended, and terminated certain of these projects as a result of various factors, and may continue to do so in the future. Additional unanticipated delays or disruptions in the completion of these projects, including due to the availability of components, power or network capacity, or any shortage of labor necessary in building portions of such projects, challenges in obtaining required government or regulatory approvals, or other geopolitical challenges or actions by governments,
whether as a result ofincluding trade disputes orotherwise,other developments, may lead to increased project costs, operational inefficiencies, interruptions in the delivery or degradation of the quality or reliability of our products and services, or impairment of assets on our balance sheet. For example, like others in our industry, we rely on certain third-party equipment and components for our technical infrastructure that are manufactured by a small number of third parties, often with significant operations in a single region such as Asia. Any of the foregoing delays or disruptions, including actions by governments or geopolitical events such as international conflicts,could result intariffs, sanctions, export or import controls, and other measures that restrict international trade, could reduce or eliminate the ability of our suppliers, manufacturers, or other third-party providers to continue their operations to manufacture, or limit or eliminate our ability to purchase, key components of our technical infrastructure. - The numbers for our key metrics, which include our
DAPdaily active people (DAP) and average revenue per person (ARPP), are calculated using internal company data based on the activity of user accounts. While these numbers are based on what we believe to be reasonable estimates of our user base for the applicable period of measurement, there are inherent challenges in measuring usage of our products across large online and mobile populations around the world. The methodologies used to measure these metrics require significant judgment and are also susceptible to algorithm or other technical errors. In addition, we are continually seeking to improve our estimates of our user base, and such estimates may change due to improvements or changes in our methodology. We regularly review our processes for calculating these metrics, and from time to time we discover inaccuracies in our metrics or make adjustments to improve their accuracy, which can result in adjustments to our historical metrics. Our ability to recalculate our historical metrics may be impacted by data limitations or other factors that require us to apply different methodologies for such adjustments. We generally do not intend to update previously disclosed Family metrics for any such inaccuracies or adjustments that are within the error margins disclosed below. - We regularly evaluate our Family metrics to estimate the percentage of our DAP consisting solely of "violating" accounts. We define "violating" accounts as accounts which we believe are intended to be used for purposes that violate our terms of service, including bots and spam.
SuchOur violating accounts estimation is based on an internal review of a limited sample of accounts, and we apply significant judgment in making this determination. For example, we look for account information and behaviors associated with Facebook and Instagram accounts that appear to be inauthentic to the reviewers, but we havelimitedless visibility into WhatsApp user activity due to encryption. In addition, if we believe an individual person has one or more violating accounts, we do not include such person in our violating accounts estimation as long as we believe they have one active account that does not constitute a violating account. In the fourth quarter of 2025, we made certain updates to the methodology we use for this estimation, including to incorporate updated data signals as a result of improvements in our ability to identify activity we believe to be violating our policies, as well as to focus on the most recent account activity when determining whether to include a person in our violating accounts estimation.InAccordingly, in the fourth quarter of2024,2025, we estimated that less than3%5% of our worldwide DAP consisted solely of violating accounts. We believe the increase compared to our prior estimation was a result of the methodology update described above. From time to time, we disable certain user accounts, make product changes, or take other actions to reduce the number of violating accounts among our users, which may also reduce our DAP estimates in a particular period. We intend to continue to disclose our estimates of the percentage of our DAP consisting solely of violating accounts on an annual basis in our Annual Report on Form 10-K. Violating accounts are very difficult to measure at our scale, and it is possible that the actual number of violating accounts may vary significantly from our estimates. - We are involved in numerous lawsuits, including stockholder derivative lawsuits and putative class action lawsuits, many of which claim statutory damages and/or seek significant changes to our business operations, and we anticipate that we will continue to be a target for numerous lawsuits in the future. Because of the scale of our user, advertiser, and developer base, the plaintiffs in class action cases filed against us typically claim enormous monetary damages even if the alleged per-user or entity harm is small or non-existent. In addition, we have faced, currently face, and will continue to face additional class action and other lawsuits based on claims related to advertising, antitrust, privacy, security, biometrics, content, algorithms, copyright, user well-being, younger users, employment, contingent workers, activities on our platform, consumer protection, unfair and deceptive trade practices, or product performance or other claims related to the use of consumer hardware and software, including virtual reality technology and products, which are new and unproven. For example, we are currently the subject of multiple putative class action suits in connection with our platform and user data practices and the misuse of certain data by a developer that shared such data with third parties in violation of our terms and policies; the disclosure of our earnings results for the second quarter of 2018; our acquisitions of Instagram and WhatsApp, as well as other alleged anticompetitive conduct; a former employee's allegations and release of internal company documents beginning in September 2021; the disclosure of our earnings results for the fourth quarter of 2021; and allegations that we inflated our estimates of the potential audience size for advertisements, resulting in artificially increased demand and higher prices. We are also the subject of multiple lawsuits related to our alleged use of biometric technology, our alleged recommendation of and/or failure to remove harmful content, information from third-party websites or apps via our business tools, our alleged use of copyright-protected
contentcontent, or data that we allegedly improperly scraped or acquired, to train our AI models, and allegations that Facebook and Instagram cause "social media addiction" in users and allegations of violations of the Children's Online Privacy Protection Act (COPPA). We have seen an increase in litigation and threatened claims related to the provision of our services to younger users, and expect to face similar litigation in the future, including as global youth-related regulation continues to evolve. The results of any such lawsuits and claims cannot be predicted with certainty, and any negative outcome from any such lawsuits could result in payments of substantial monetary damages or fines, or undesirable changes to our products or business practices, and accordingly our business, financial condition, or results of operations could be materially and adversely affected. - We may pay substantial amounts of cash or incur debt to pay for acquisitions or other strategic transactions, which has occurred in the past and could adversely affect our liquidity. The incurrence of indebtedness also results in increased fixed obligations and increased interest expense, and could also include covenants or other restrictions that would impede our ability to manage our operations.
WeFrom time to time we may also issue equity securities to pay for acquisitions or other strategic transactions and we regularly grant restricted stock units to retain the employees of acquired companies, which could increase our expenses, adversely affect our financial results, and result in dilution to our stockholders. In addition, any acquisitions or other strategic transactions we announce could be viewed negatively by users, marketers, developers, or investors, which may adversely affect our business or the price of our Class A common stock. - We have had, and may
havein the future have, exposure to greater than anticipated tax liabilities. - Our tax obligations, including income and non-income taxes, are based in part on our corporate operating structure and intercompany arrangements, including the manner in which we operate our business, develop, value, manage, protect, and use our intellectual property, and the valuations of our intercompany transactions. The tax laws applicable to our business, including the laws of the United States and other jurisdictions, are subject to
interpretation and certain jurisdictions are aggressively interpreting their laws in new ways in an effort to raise additional tax revenue from companies such as Meta.interpretation. Certain jurisdictions have applied novel or aggressive interpretations of their laws in an effort to raise additional tax revenue from companies such as Meta, and we may experience similar developments in the future. We are subject to regular review and audit by U.S. federal, state, and foreign tax authorities. Tax authorities may disagree with certain positions we have taken, including our methodologies for valuing developed technology or intercompany arrangements, and any adverse outcome of such a review or audit could increase our worldwide effective tax rate, increase the amount of non-income taxes imposed on our business, and harm our financial position, results of operations, and cash flows. For example, in 2016 and 2018, the IRS issued formal assessments relating to transfer pricing with our foreign subsidiaries in conjunction with the examination of the 2010 through 2013 tax years. Although we disagree with theIRS'sIRS' position and are litigating this issue, the ultimate resolution is uncertain and, if resolved in a manner unfavorable to us, may adversely affect our financial results. - The tax regimes we are subject to or operate under, including income and non-income taxes, are unsettled and may be subject to significant change. Changes in tax laws or tax rulings, or changes in interpretations of existing laws, could materially affect our financial position, results of operations, and cash flows. For example, the
2017 Tax Cuts and JobsOne Big Beautiful Bill Act(Tax Act)(OBBBA) enacted inDecember 2017July 2025 had a significant impact on our tax obligations and effective tax rate for thefourththird quarter of2017.2025. The issuance of additional regulatory or accounting guidance related to theTax Act,OBBBA or other executive or Congressional actions in the United States or globally could materiallyincreaseaffect our tax obligations and significantly impact our effective tax rate in the period such guidance is issued or such actions take effect, and in future periods. In addition, many countries have recently proposed or recommended changes to existing tax laws or have enacted new laws that could significantly increase our tax obligations in many countries where we do business or require us to change the manner in which we operate our business. - Over the last several years, the Organization for Economic Cooperation and Development (OECD) has been working on a Base Erosion and Profit Shifting Project that, if implemented, would change various aspects of the existing framework under which our tax obligations are determined in many of the countries in which we do business. A number of countries have enacted legislation to implement the OECD’s 15% global minimum tax regime. As additional jurisdictions enact legislation, transitional relief expires, and other provisions of the minimum tax legislation become effective, our effective tax rate and cash tax payments could increase in future years. Similarly, the European Commission and several countries have issued proposals that would apply to various aspects of the current international tax rules under which we are taxed. These proposals include changes to the existing rules to calculate income tax, as well as proposals to change or impose new types of non-income taxes, including taxes based on a percentage of revenue. For example, several jurisdictions have proposed or enacted taxes applicable to certain digital services, which include business activities on digital advertising and online marketplaces, and which apply to our business. In the absence of active OECD discussions, countries may continue imposing unilateral tax measures, such as digital services taxes, outside existing treaty frameworks. These measures may proliferate in the absence of bilateral or multilateral agreement.
- In addition, ongoing volatility due to international trade may prompt foreign governments to expand regulatory authority or adopt new measures, increasing compliance risks, taxes, and operational complexities. Due to the large and expanding scale of our international business activities, many of these types of changes to the taxation of our activities described above could increase our worldwide effective tax rate, increase the amount of non-income taxes imposed on our business, and harm our financial position, results of operations, and cash flows. Such changes may also apply retroactively to our historical operations and result in taxes greater than the amounts estimated and recorded in our financial statements.
- The tax effects of the accounting for share-based compensation have in the past impacted, and may in the future impact, our effective tax rate, sometimes significantly, from period to period. In periods in which our stock price varies from the grant price of the share-based compensation vesting in that period, we will recognize excess tax benefits or shortfalls that
willmay impact our effective tax rate. Following the enactment of OBBBA, excess tax benefits from share-based compensation may not be realizable as a result of the Corporate Alternative Minimum Tax (CAMT). In future periods in which our stock price varies in comparison to the grant price of the share-based compensation vesting in that period, our effective tax rate may be inversely impacted. The amount and value of share-based compensation issued relative to our earnings in a particular period will also affect the magnitude of the impact of share-based compensation on our effective tax rate. In future periods, the tax effects of share-based compensation are dependent on our stock price, which we do not control, the CAMT system, and future changes in tax laws. - In addition, we cannot guarantee we will continue to attract and retain the personnel we need to maintain our competitive position. In particular, we expect to continue to face significant challenges in hiring specialized technical personnel, particularly senior engineering and AI research talent, whether as a result of competition with other companies or other factors. As our company continues to evolve, the incentives to attract, retain, and motivate employees provided by our equity awards or by future arrangements may not be as effective as in the past. From time to time we issue significant equity to attract additional employees or to retain our existing employees, resulting in substantial additional share-based compensation expense and dilution to the ownership of our existing stockholders. Our ability to attract, retain, and motivate employees may also be adversely affected by stock price volatility. In addition, restrictive immigration policies or legal or regulatory developments relating to immigration may negatively affect our efforts to attract and hire new personnel as well as retain our existing personnel. If we do not succeed in attracting, hiring, and integrating excellent personnel, or retaining and motivating existing personnel, we may be unable to grow
effectively.effectively or otherwise achieve our business objectives. - Governments from time to time seek to censor or moderate content available on Facebook or our other products in their country, restrict access to our products from their country partially or entirely, or impose other restrictions that may affect the accessibility of our products in their country for an extended period of time or indefinitely. For example, user access to Facebook and certain of our other products has been or is currently restricted in whole or in part in China, Iran, and North Korea. In addition, government authorities in other countries may seek to restrict user access to our products if they consider us to be in violation of their laws or a threat to public safety or for other reasons, and certain of our products have been restricted by governments in other countries from time to time. For example, in 2020, Hong Kong adopted a National Security Law that provides authorities with the ability to obtain information, remove and block access to content, and suspend user services, and if we are found to be in violation of this law then the use of our products may be restricted. Hong Kong has passed additional national security legislation in 2024. In addition, if we are required to or elect to make changes to our marketing and sales or other operations in Hong Kong as a result of the National Security Law or other legislation, our revenue and business in the region will be adversely affected. In addition, in connection with the war in Ukraine in
the first quarter of2022, access to Facebook and Instagram was restricted in Russia and the services were then prohibited by the Russian government, which has adversely affected, and will likely continue to adversely affect, our revenue and business in the region. - We are subject to a variety of laws and regulations in the United States and abroad that involve matters central to our business, including privacy, data use, data combination, data protection and personal information, the provision of our services to younger users, biometrics, encryption, rights of publicity, content, integrity, intellectual property, advertising, marketing, distribution, data security, data retention and deletion, data localization and storage, data disclosure, AI and machine learning, electronic contracts and other communications, competition, protection of minors, consumer protection, civil rights, accessibility, telecommunications, product liability, medical devices, e-commerce, taxation, economic or other trade controls including sanctions, export controls, anti-corruption and political law compliance, securities law compliance, and online payment services. The introduction of new products, expansion of our activities in certain jurisdictions, or other actions that we may take may subject us to additional laws, regulations, or other government scrutiny. In addition, these U.S. and foreign laws and regulations may impose different obligations from each other and create the potential for significant fines to be
imposed.imposed or other consequences such as changes to our products or business practices. - We are also subject to evolving laws and regulations that dictate whether, how, and under what circumstances we can transfer, process or receive certain data that is critical to our operations, including data shared between countries or regions in which we operate and data shared among our products and services. For example, the bases upon which we have relied for data transfers from the European Union to the United States have been subjected to regulatory and judicial scrutiny.
For example,The Court of Justice of theCJEUEuropean Union (CJEU) invalidated the Privacy Shield in 2020 and also considered the validity ofSCCsStandard Contractual Clauses (SCCs) as a basis to transfer user data from the European Union to the United States following a challenge brought by the Irish Data Protection Commission (IDPC). Although the CJEU upheld the validity of SCCs inJuly2020,onin May12,2023, the IDPC issued a Final Decision concluding that Meta Platforms Ireland’s reliance on SCCs in respect of certain transfers of European Economic Area (EEA) Facebook user data was not in compliance with the GDPR. The IDPC issued an administrative fine of EUR €1.2 billion as well as corrective orders requiring Meta Platforms Ireland to suspend the relevant transfers and to bring its processing operations into compliance with Chapter V GDPR by ceasing the unlawful processing, including storage, of such data in the United States. We are appealing this Final Decision and it is currently subject toan interima stay from the Irish High Court. We have also implemented steps to comply with the above corrective orders and are pending the IDPC's confirmation that these address the corrective orders. During the course of this matter, in 2022, the European Union and United States reached an agreement on a new EU-U.S. Data Privacy Framework (EU-U.S. DPF), which the European Commission deemed adequate in relation to U.S. data transfers in July 2023. The EU-U.S. DPF replaces two prior adequacy frameworks which were invalidated by the CJEU. A further invalidation of the EU-U.S. DPF by the CJEU could create considerable uncertainty and lead to us being unable to offer a number of our most significant products and services, including Facebook and Instagram, in Europe, which would materially and adversely affect our business, financial condition, and results of operations. - We have been subject to other significant legislative and regulatory developments, which together with proposed or new legislation and regulations could significantly affect our business in the future. For example, we have implemented a number of product changes and controls as a result of requirements under the European General Data Protection Regulation (GDPR), and may implement additional changes in the future. The GDPR also requires submission of personal data breach notifications to our lead European Union privacy regulator, the IDPC, and includes significant penalties for non-compliance with the notification obligation as well as other requirements of the regulation. The interpretation of the GDPR is still evolving, including through decisions of the CJEU, and draft decisions in investigations by the IDPC are subject to review by other European privacy regulators as part of the GDPR's consistency mechanism, which may lead to significant changes in the final outcome of such investigations. We also face potential enforcement from European privacy regulators other than the IDPC, including where those regulators consider they must act urgently or where they believe their concerns relate only to data processing undertaken in their individual jurisdiction. As a result, the interpretation and enforcement of the GDPR, as well as the imposition and amount of penalties for non-compliance, are subject to significant uncertainty, and as it evolves, could potentially have a negative impact on our business and/or our operations. In addition, Brazil, the United Kingdom, and other countries have enacted similar data protection regulations imposing data privacy-related requirements on products and services offered to users in their respective jurisdictions. The California Consumer Privacy Act, as amended by the California Privacy Rights
Act (CCPA),Act, also establishes certain transparency rules and creates certain data privacy rights for users, including limitations on our use of certain sensitive personal information and more ability for users to control the purposes for which their data is shared with third parties. Other states have proposed or enacted similar comprehensive privacy laws that afford users with similar data privacy rights and controls. These laws and regulations are evolving and subject to interpretation, and resulting limitations on our advertising services, or reductions of advertising by marketers, have to some extent adversely affected, and will continue to adversely affect, our advertising business. Some states have also proposed or enacted laws specifically focused on whether and how a company can moderate content on its services, and/or on the privacy rights and controls for users under 18 years old and their parents or guardians. Like comprehensive privacy laws, these laws are evolving and subject to interpretation, and may restrict our ability to offer certain products and services provided to all or certain cohorts of users in those states, adversely affecting our advertising business. In Europe, evolving interpretation of the ePrivacy Directive's requirements regarding the use of cookies and similar technologies may lead to regulators imposing specific measures in the future which could directly impact our use of such technologies. In addition, the ePrivacy Directive and national implementation laws impose additional limitations on the use of data across messaging products and include significant penalties for non-compliance. Changes to our products or business practices as a result of these or similar developments have adversely affected, and may in the future adversely affect, our advertising business. For example, in response to regulatory developments in Europe, we announced plans to change the legal basis for behavioral advertising on Facebook and Instagram in the European Union, European Economic Area, and Switzerland from "legitimate interests" to "consent," and in November 2023 we began offering users in the region a "subscription for no ads" alternative. We are engaging with regulators on our consent model, including regarding compliance with requirements under the GDPR, DMA, and EU consumer laws. For example, in March 2024, the European Commission opened formal proceedings regarding the compliance of our "subscription for no ads" model with requirements under the DMA, and it issued preliminary findings in July 2024. In addition, the European Data Protection Board has published an opinion on the operation of such models under GDPR and European consumer protection organizations have raised concerns regarding our compliance with consumer protection laws. In response to these developments, in November 2024, we began offering users in the European Union, European Economic Area, and Switzerland who elect to continue using our services free-of-charge, supported by ads, an option to see less personalizedads,ads (LPA), which areexpected to beless relevant and effective than our premium ad offerings. In April 2025, the European Commission issued a final decision that our "subscription for no ads" model does not comply with such requirements. We made significant modifications to LPA since the European Commission issued its final decision. We have appealed the European Commission's decision but further modifications to our model may be imposed during the appeal process, which could result in a materially worse user experience for European users and a significant impact to our European business and revenue. These or any similar developments in the future may negatively impact our user growth and engagement, revenue, and financial results. - Similarly, there are a number of legislative proposals or recently enacted laws in the European Union, the United States, at both the federal and state level, as well as other jurisdictions that could impose new obligations or limitations in areas affecting our business. For example, the DMA in the European Union imposes restrictions and requirements on companies like ours, including in areas such as the combination of data across services, mergers and acquisitions, and product design. The DMA also includes significant penalties for non-compliance, and its key requirements are enforceable against designated gatekeeper companies as of March 2024. The DMA has caused, and may in the future cause, us to incur significant compliance costs and make changes to our products or business practices. The requirements under the DMA will likely be subject to further interpretation and regulatory engagement. Pending or future proposals to modify competition laws in a number of jurisdictions could have similar effects. Further, the DSA, which started to apply to our business as of August 2023, imposes certain restrictions and requirements for our products and services, subjects us to increased compliance costs, and includes significant penalties for non-compliance. In the UK, the OSA establishes similar types of obligations. The interpretation and enforcement of the
DMADMA, DSA, andthe DSA,OSA, as well as the imposition and amount of penalties for non-compliance, are subject to significant uncertainty. In addition, some countries, such as the UK, India, and Turkey, are considering or have passed legislation implementing data protection requirements, new competition requirements, or requiring local storage and processing of data or similar requirements that could require substantial changes to our products, increase the cost and complexity of delivering our services, cause us to cease the offering of our products and services in certain countries, and/or result in fines or other penalties.NewWe are also subject to new legislation or regulatory decisionsmaythat restrict our ability to collect and use information about minors or also limit our advertising services or our ability to offer products and services to minors in certain jurisdictions. For example, several U.S. states, including Arkansas, California, Colorado, Florida, New York, Texas, and Utah,Texas, California, and Florida,among others, have passed laws restricting our ability to offer services to minors without parental consent or otherwise limiting the services that we can provide to minors. While enforcement of a number of these statutes (or parts of them) has been enjoined or stayed as a result of legal challenges to them, it is possible that the decisions to enjoin these statutes may be overturned, the injunctive orders may expire, and certain statutes are coming into effect that may not be subject to injunctions. Should enforcement of one or more of these statutes not be enjoined, we may not be able to comply with certain of these statutes by their respective effective dates. We are facing similar challenges in other jurisdictions, including Europe, Latin America, and Asia-Pacific. For example, various EU member states are currently considering a range of legislation from mandatory age verification requirements to banning minor access to social media services.We may face similar challenges in light ofIn addition, recent legislation in Australiawhichimposes a social media ban for users under 16 yearsold that is expected to be effective by December 2025,old, requiring certain social media companies to take reasonable steps to ensure under 16 year olds do notcreatehold user accounts.Legislative proposalsAs a result of legislative proposals, new laws, and evolving interpretation of existing laws in Europe, Asia-Pacific, Latin America, and otherjurisdictions may alsojurisdictions, we are also, and expect to continue to be, subjectusto new requirements relating to allegedly fraudulent or illegal activities by third parties on our platform, which could continue to cause us to incur significant compliance costs or make changes to our products or business practices, and could subject us to additional fines and penalties or liability for losses to users or other third parties in such transactions. In addition, the Province of British Columbia has considered, and may in the future consider, a bill that would permit the government to recover public health-related costs potentially associated with providing goods and services in British Columbia, including potentially social media services. - We receive formal and informal inquiries from government authorities and regulators regarding our compliance with laws and regulations, many of which are evolving and subject to interpretation. We are and expect to continue to be the subject of investigations, inquiries, data requests, requests for information, actions, and audits in the United States, Europe, and around the world, particularly in the areas of privacy, data use, data combination, and data protection, including with respect to processing of sensitive data, data from third parties, data for advertising purposes, data security, minors, data subject rights, safety, law enforcement, consumer protection, civil rights, content and content moderation, use of our platform for illegal, illicit, or otherwise objectionable activity, competition, consumer hardware and software, including virtual reality technology and products, AI, generative AI, and machine learning. In addition, we are currently, and may in the future be, subject to regulatory orders or consent decrees. For example, data protection, competition, content, and consumer protection authorities in the European Union, United States, and other jurisdictions have initiated actions, investigations, or administrative orders seeking to restrict the ways in which we collect and use information, or impose sanctions, and other authorities may do the same. In addition, we have been and continue to be the subject of litigation and investigations related to the ways in which we collect and use information, including where advertisers are subject to additional regulation such as housing, employment, credit, and financial services. In addition, beginning in March 2018, we became subject to FTC, state attorneys general, and other government inquiries in the United States, Europe, and other jurisdictions in connection with our platform and user data practices as well as the misuse of certain data by a developer that shared such data with third parties in violation of our terms and policies. In July 2019, we entered into a settlement and modified consent order to resolve the FTC inquiry, which took effect in April 2020 and, among other things, required us to significantly enhance our practices and processes for privacy compliance and oversight.
TheCertain state attorneys general inquiries and litigation, and certain government inquiries in other jurisdictions remain ongoing. The FTC also continues to monitor us and our compliance with the modified consent order and initiated an administrative proceeding against us, which we are challenging at the agency and in federal court, that alleges deficient compliance and violations of the Children's Online Privacy Protection Act (COPPA), the COPPA Rule, and Section 5 of the Federal Trade Commission Act and seeks changes to our business. If we are unsuccessful in our challenge to the FTC's action and the agency imposes its proposed order in its current form, we would be subject to significant limitations, including on our ability to launch new and modified products or use data of users under 18 years old. We also notify the IDPC, our lead European Union privacy regulator under the GDPR, and other regulators of certain other personal data breaches and privacy issues, issue similar notifications to European and other regulators under other laws (such as UK GDPR and Member State implementations of the ePrivacy Directive), and are subject to inquiries and investigations by the IDPC and other regulators regarding various aspects of our regulatory compliance. In addition, we are subject to inquiries and investigations by the European Commission regarding our compliance with various provisions of the DSA relating to the use of Facebook and Instagram, including matters related to elections, content reporting and appeals, third-party access to data, political content recommendations, potential deceptive advertising and disinformation, and minors and other vulnerable users. We have been, and may in the future be, subject to penalties, fines, and requirements to change our business practices as a result of such inquiries and investigations. In addition, in July 2024, we entered into a settlement to resolve a lawsuit by the state of Texas in connection with the "tag suggestions" feature and other uses of facial recognition technology. - We are engaged in ongoing privacy compliance and oversight efforts, including in connection with our modified consent order with the FTC, requirements of the GDPR and UK GDPR, and other current and anticipated regulatory and legislative requirements around the world, such as U.S. state privacy laws, youth social media laws, the ePrivacy Directive,
DMA, DSA, EU AI Act, the Korean Personal Information Protection Act, and the Indian Digital Personal Data Protection Act. - DMA, DSA, OSA, EU AI Act, the Korean Personal Information Protection Act, and the Indian Digital Personal Data Protection Act. In particular, we are maintaining a comprehensive privacy program in connection with the FTC consent order that includes substantial management and board of directors oversight, stringent operational requirements and reporting obligations, prohibitions against making misrepresentations relating to user data, a process to regularly certify our compliance with the privacy program to the FTC, and regular assessments of our privacy program by an independent third-party assessor, which has been and will continue to be challenging and costly to maintain and enhance. These compliance and oversight efforts are increasing demand on our systems and resources, and require significant new and ongoing investments, including investments in compliance processes, personnel, and technical infrastructure. We continually reallocate resources internally to assist with these efforts, and this has had, and will continue to have, an adverse impact on our other business initiatives. In addition, these efforts require substantial modifications to our business practices and make some practices such as product and ads development more difficult, time-consuming, and costly. As a result, we believe our ability to develop and launch new features, products, and services in a timely manner has been and will continue to be adversely affected. Further, our privacy compliance and oversight efforts have required, and we expect will continue to require, significant time and attention from our management and board of directors. The requirements of the FTC consent order and other privacy-related laws and regulations are complex and apply broadly to our business, and from time to time we notify relevant authorities of instances where we are not in full compliance with these requirements or otherwise discover privacy issues, and we expect to continue to do so as any such issues arise in the future. In addition, regulatory and legislative privacy requirements are constantly evolving and can be subject to significant change and uncertain interpretation. For example, we are subject to restrictions and requirements under the DMA, including in areas such as the combination of data across services and product design, which will likely be subject to further interpretation and regulatory engagement.
- We have faced, currently face, and will continue to face claims and government and regulatory inquiries relating to information or content that is published or made available on our products, including claims, inquiries, and investigations relating to our policies, algorithms, and enforcement decisions with respect to such information or content. In particular, the nature of our business exposes us to claims and inquiries related to defamation, dissemination of misinformation or news hoaxes, deceptive and fraudulent advertising, sanctions, discrimination, harassment, intellectual property rights, rights of publicity and privacy, personal injury torts, laws regulating hate speech or other types of content, on- or offline safety and well-being (such as acts of violence, terrorism, improper promotion or distribution of pharmaceuticals and illicit drugs, human exploitation, child exploitation, illegal gaming, and other fraudulent or otherwise illegal activity), products liability, consumer protection, and breach of contract, among others. For example, over the last several years we have seen an increase in claims brought by or on behalf of younger
usersusers, including claims related to well-being issues based on allegedly harmful content that is shared on or recommended by our products. In addition, we have been subject to litigation alleging that our ad targeting and delivery practices constitute violations of anti-discrimination laws. - The potential risks relating to any of the foregoing types of claims are currently enhanced in certain jurisdictions outside the United States where our protection from liability for third-party actions may be unclear or where we may be less protected under local laws than we are in the United States. For example, in April 2019, the European Union passed a directive (the European Copyright Directive) expanding online platform liability for copyright infringement and regulating certain uses of news content online, which the EU member states have since implemented into their national laws. In addition, the European Union revised the European Audiovisual Media Service Directive to apply to online video-sharing platforms, which member states are implementing. Additionally, in June 2025, the Brazilian Supreme Court partially invalidated the country's intermediary liability framework, which previously limited platform responsibility for third-party content. The new court-established liability framework requires platforms to remove unlawful content upon private notice and to implement adequate measures to prevent and remove illegal ads and content related to certain crimes under local law, resulting in civil liability in case of non-compliance. As a result, we anticipate making product and operational changes to our content reporting processes in Brazil and may face increased litigation and/or regulatory enforcement. In the United States, in 2023, the U.S. Supreme Court heard oral argument in a matter in which the scope of the protections available to online platforms under Section 230 of the Communications Decency Act (Section 230) was at issue, but it ultimately declined to address Section 230 in its decision. There also have been, and continue to be, various other litigation concerning, and state and federal legislative and executive efforts to remove or restrict, the scope of the protections under Section 230, as well as to impose new obligations on online platforms with respect to commerce listings, user access and content, including electoral-related and AI-generated content, counterfeit goods and copyright-infringing material, and our current protections from liability for third-party content in the United States could decrease or change. We could incur significant costs investigating and defending such claims and, if we are found liable, significant damages.
- We could also face fines, orders restricting or blocking our services in particular geographies, or other judicial or government-imposed remedies as a result of content hosted on our services. For example, legislation in Germany and India has resulted, and may result in the future, in the imposition of fines or other penalties for failure to comply with certain content removal, law enforcement cooperation, and disclosure obligations. Numerous other countries in Europe, the Middle East, Asia-Pacific, and Latin America are considering or have implemented similar legislation imposing liability or potentially significant penalties, including fines, service throttling, or advertising bans, for failure to remove certain types of content or follow certain processes. For example, we have been subject to fines and may in the future be subject to other penalties in connection with social media legislation in Turkey, and we have been subject to fines and service blocking and prohibition in Russia. Content-related legislation also has required us, and may require us in the future, to change our products or business practices, increase our costs, or otherwise impact our operations or our ability to provide services in certain geographies. For example, the European Copyright Directive requires certain online services to obtain authorizations for copyrighted content or to implement measures to prevent the availability of that content, which may require us to make substantial investments in compliance processes. Member states' laws implementing the European Copyright Directive may also require online platforms to pay for content. In addition, our products and services are subject to restrictions and requirements, and we are subject to increased compliance costs, and potential fines or other penalties in the event of non-compliance, as a result of the Digital Services Act in the European Union, which started to apply to our business as of August 2023, and other content-related legislative developments such as the Online Safety and Media Regulation Act in Ireland and the Online Safety Act in the United Kingdom. Certain countries and U.S. states have also implemented or proposed legislation that may require us to pay publishers for certain news content shared on our products. For example, as a result of such legislation in Canada, we have ended the availability of news content for Canadian users on Facebook and Instagram. In the United States, changes to the protections available under Section 230 or the First Amendment to the U.S. Constitution or new state or federal content-related legislation or investigations may increase our costs or require significant changes to our products, business practices, or operations, which could adversely affect user growth and engagement.
- Several of our products offer Payments functionality, including enabling our users to purchase tangible, virtual, and digital goods from merchants and developers that offer applications using our Payments infrastructure, send money to other users, and make donations to certain charitable organizations, among other activities. We are subject to a variety of laws and regulations in the United States, Europe, and elsewhere, including those governing anti-money laundering and counter-terrorist financing, money transmission, stored value, gift cards and other prepaid access instruments, electronic funds transfer, virtual currency, consumer protection, charitable fundraising, economic sanctions, and import and export restrictions. In addition, we could become subject to new consumer protection laws and regulations that may be adopted or amended, including those related to payments activity as well as sharing, collection, and use of payments-related data. Depending on how our Payments products evolve, we may also be subject to other laws and regulations including those governing gambling, banking, and lending. In some jurisdictions, the application or interpretation of these laws and regulations is not clear. We have received certain payments licenses in the United
States, the European Economic Area,States and other jurisdictions for our regulated Payments-related products and activities. These licenses increase flexibility in how our use of Payments may evolve, help mitigate regulatory uncertainty, and will generally require us to demonstrate compliance with many domestic and foreign laws in relation to ourregulatedlicensed Payments products and activities. Our efforts to comply with these laws and regulations could be costly and result in diversion of management time and attention and may still not guarantee compliance. In the event that we are found to be in violation of any such legal or regulatory requirements, we may be subject to monetary fines or other penalties such as a cease and desist order, or we may be required to make product changes, any of which could have an adverse effect on our business and financial results. - Our industry is prone to cyber-attacks by parties seeking unauthorized access to our data or users' data or to disrupt our ability to provide service or otherwise harm us. Our products and services involve the collection, storage, processing, and transmission of a large amount of data. Any failure to prevent or mitigate security breaches and improper access to or disclosure of our data or user data, including personal information, content, or payment information from users,
orinformation from marketers, and other intellectual property or content on our systems, could result in the loss, modification, disclosure, destruction, or other misuse of such data, which could harm our business and reputation and diminish our competitive position. In addition, computer malware, viruses, social engineering (such as spear phishing attacks), scraping, and general hacking continue to be prevalent in our industry, have occurred on our systems, and will occur on our systems in the future. We also regularly encounter attempts to create false or undesirable user accounts, purchase ads, or take other actions on our platform for purposes such as spamming, spreading misinformation, or other illegal, illicit, or otherwise objectionable ends. As a result of our prominence, the size of our user base, the types and volume of personal data and content on our systems, and the evolving nature of our products and services (including our efforts involving new and emerging technologies), we believe that we are a particularly attractive target for such breaches and attacks, including from nation states and highly sophisticated, state-sponsored, or otherwise well-funded actors, and we experience heightened risk from time to time as a result of geopolitical events. Our efforts to address undesirable activity on our platform also increase the risk of retaliatory attacks. Such breaches and attacks may cause interruptions to the services we provide, degrade the user experience or otherwise adversely affect users, cause users or marketers to lose confidence and trust in our products, impair our internalsystems,systems or product development, or result in financial harm to us. Our efforts to protect our company data or the information we receive, and to prevent or disable undesirable activities on our platform, may also be unsuccessful due to software bugs, misconfigurations, vulnerabilities, or other technical malfunctions; employee, contractor, or vendor error or malfeasance; social engineering or other cyber-attacks directed towards our personnel or their access; misuse of company data or systems by our personnel; defects or vulnerabilities in our vendors' information technology systems or offerings; government exploitation or surveillance; breaches of physical security of our facilities, technical infrastructure, or other equipment; or other threats that evolve. In addition, other parties may attempt to fraudulently or maliciously induce employees, contractors, vendors, or users to disclose information in order to gain access to our data or our users' data. Our AI initiatives and other efforts to develop and launch new features, products, and services in a timely manner may introduce additional risks and vulnerabilities that are not fully mitigated. In particular, our efforts to develop and deploy AI models, internal and third-party AI tools, and other AI applications expose us to increased and novel risks and vulnerabilities, including prompt injection, errors, and other issues related to AI agents, as well as compromise of valuable intellectual property including source code, model weights, and other assets. Cyber-attacks continue to evolve in sophistication and volume, and inherently may be difficult to detect for long periods of time. Although we have developed systems and processes that are designed to protect our data and user data, to reduce the risk of data loss or misuse, to disable undesirable accounts and activities on our platform, and to reduce the risk of or detect security breaches, such measures will not provide absolute security, and we cannot assure you that we will be able to react in a timely manner to any cyber-attacks or other security incidents, or that our remediation efforts will be successful. Our business and operations span numerous geographies around the world and involve thousands of employees, contractors, vendors, developers, partners, and other thirdparties.parties, including AI and cloud services. At any given time, we face known and unknown cybersecurity risks and threats that are not fully mitigated, and we discover vulnerabilities in our security efforts. - Such incidents and activities include the use of user data or our systems in a manner inconsistent with our terms, contracts or policies, the existence of hacked, false or undesirable user accounts, election interference, improper advertising practices, activities that threaten people's safety or well-being on- or offline (such as acts of violence, terrorism, improper promotion or distribution of pharmaceuticals and illicit drugs, human exploitation, child exploitation, and illegal gaming), instances of spamming, surveillance, scraping, data harvesting, unsecured datasets, or spreading misinformation, or other fraudulent or otherwise illegal activity. From time to time we are unsuccessful in our efforts to enforce our policies or otherwise prevent or remediate any such incidents. We may also be subject to increased risk as a result of the use of AI technologies in connection with such incidents and activities, or changes to our content policies and enforcement efforts from time to time.
- Our products and internal systems rely on software and hardware, including software and hardware developed or maintained internally and/or by third parties (including public cloud providers, AI technologies and services, open source
softwaresoftware, and the operating systems and browsers which users rely on to run our applications and access our systems), that is highly technical and complex. In addition, our products and internal systems depend on the ability of such software and hardware to store, retrieve, process, and manage immense amounts of data. The software and hardware on which we rely has contained, and will in the future contain, errors, bugs, or vulnerabilities, and our systems are subject to certain technical limitations that may compromise our ability to meet our objectives. Some errors, bugs, or vulnerabilities inherently may be difficult to detect and may only be discovered after the code has been released for external or internal use. We also face risks from errors, bugs, or vulnerabilities introduced through the use of AI to develop or maintain software or systems and the use of AI within those software and systems. Errors, bugs, vulnerabilities, design defects, or technical limitations within the software and hardware on which we rely, or human error or malfeasance in using such systems, have led to, and may in the future lead to, outcomes including a negative experience or other adverse effects for users and marketers who use our products, compromised ability of our products to perform in a manner consistent with our terms, contracts, or policies, delayed product introductions or enhancements, targeting, measurement, or billing errors, compromised ability to protect the data of our users and/or our intellectual property or otherdata,data or to address violating activity on our platform, or reductions in our ability to provide some or all of our services. For example, we make commitments to our users as to how their data will be collected, used, shared, and retained within and across our products, and oursystemssystems, and the software and hardware on which we rely, are subject to errors, bugs and technical limitations that may prevent us from fulfilling these commitments reliably. In addition, any errors, bugs, vulnerabilities, or defects in our systems or the software and hardware on which we rely, failures to properly address or mitigate the technical limitations in our systems, or associated degradations or interruptions of service or failures to fulfill our commitments to our users, have led to, and may in the future lead to, outcomes including damage to our reputation, loss of users, loss of marketers, loss of revenue, regulatory inquiries, litigation, or liability for fines, damages, or other remedies, any of which could adversely affect our business and financial results. - Companies in the internet, technology, and media industries own large numbers of patents, copyrights, trademarks, and trade secrets, and frequently enter into litigation based on allegations of infringement, misappropriation, or other violations of intellectual property or other
rights.rights, including in novel areas such as those relating to AI training and AI outputs. In addition, various "non-practicing entities" that own patents and other intellectual property rights often attempt to aggressively assert their rights in order to extract value from technology companies. Furthermore, from time to time we may introduce or acquire new products, including in areas where we historically have not competed, or introduce new features for existing products, which could increase our exposure to intellectual property claims from competitors, non-practicing entities, and other rights holders. - From time to time, we receive notice from patent, copyright, and trademark holders and other parties alleging that certain of our products and services, trademarks, or user content, infringe their intellectual property
rights.rights or that certain employees may have misappropriated trade secrets from their former employers. We presently are involved in a number of intellectual property lawsuits, and as we face increasing competition and develop new products and services, we expect the number of intellectual property claims against us to grow. For example, we and other companies are, and expect to continue to be, the subject of litigation in the United States, Europe, Canada, and elsewhere alleging copyright infringement in connection with the acquisition, distribution, and use of copyrighted materials for AI training as well as potential reproduction of copyrighted materials in AI outputs, including cases addressing the applicability of the fair use defense in the United States. There can be no assurances that favorable final outcomes will be obtained in these cases. In addition, plaintiffs may seek, and we may become subject to, preliminary or provisional rulings in the course of any such litigation, including potential preliminary injunctions requiring us to change or cease some or all of our operations. We may decide to settle such lawsuits and disputes on terms that are unfavorable to us. Similarly, if any litigation to which we are a party is resolved adversely, we may be subject to an unfavorable judgment that may not be reversed upon appeal. The terms of such a settlement or judgment may require us to change or cease some or all of our operations or pay substantial amounts to the otherparty.parties, including statutory damages to large numbers of copyright holders. For certain jurisdictions, including the United States, statutory damages for copyright liability are calculated on a per work basis, which may result in substantial damages, particularly given the large volumes of data required to train AI models. In addition, we may have to seek a license to continue practices found to be in violation of a third party's rights, which may not be available on reasonable terms, or at all, and may significantly increase our operating costs and expenses. As a result, we may also be required to develop alternative non-infringing technology or practices, or branding or discontinue the practices or branding. The development of alternative non-infringing technology, branding or practices could require significant effort and expense, could result in less effective technology, branding or practices or otherwise negatively affect the user experience, or may not be feasible. We have experienced unfavorable outcomes in such disputes and litigation in the past, and our business, financial condition, and results of operations could be materially and adversely affected as a result of an unfavorable resolution of the disputes and litigation referred to above. - For example, the COVID-19 pandemic led to increases and decreases in the size and engagement of our active user base from period to period at different points during the pandemic.
- Further, we face significant competition from other companies that are developing their own AI features and technologies. Other companies may develop AI features and technologies that are similar or superior to our technologies or are more cost-effective to develop and deploy. Our AI initiatives also depend on our access to data to effectively train our models.
- Our Reality Labs efforts include our metaverse and wearables initiatives.
- We also compete with companies that develop and deliver consumer hardware and augmented, mixed, and virtual reality products and services.
- There are ongoing OECD negotiations that contemplate an alternative to these proposals, which may proliferate in the absence of multilateral agreement.
- For example, in 2024, excess tax benefits recognized from share-based compensation decreased our provision for income taxes by $3.22 billion and our effective income tax rate by five percentage points as compared to the tax rate without such benefits. These tax effects are dependent on our stock price, which we do not control, and a decline in our stock price could significantly increase our effective tax rate and adversely affect our financial results.
- As we continue to mature, the incentives to attract, retain, and motivate employees provided by our equity awards or by future arrangements may not be as effective as in the past, and if we issue significant equity to attract additional employees or to retain our existing employees, we would incur substantial additional share-based compensation expense and the ownership of our existing stockholders would be further diluted.
- For example, in 2016, the European Union and United States agreed to a transfer framework for data transferred from the European Union to the United States, called the Privacy Shield, but the Privacy Shield was invalidated in July 2020 by the Court of Justice of the European Union (CJEU). In addition, the other bases upon which Meta relies to transfer such data, such as Standard Contractual Clauses (SCCs), have been subjected to regulatory and judicial scrutiny.
- On March 25, 2022, the European Union and United States announced that they had reached an agreement in principle on a new EU-U.S. Data Privacy Framework (EU-U.S. DPF). On October 7, 2022, President Biden signed the Executive Order on Enhancing Safeguards for United States Signals Intelligence Activities (E.O.), and on June 30, 2023, the European Union and the three additional countries making up the EEA were designated by the United States Attorney General as a “qualifying state” under Section 3(f) of the E.O. On July 10, 2023, the European Commission adopted an adequacy decision in relation to the United States. The adequacy decision concludes that the United States ensures an adequate level of protection for personal data transferred from the European Union to organizations in the United States that are included in the “Data Privacy Framework List,” maintained and made publicly available by the United States Department of Commerce pursuant to the EU-U.S. DPF. The implementation of the EU-U.S. DPF and the adequacy decision are important and welcome milestones, and we have implemented steps to comply with the above corrective orders following engagement with the IDPC.
- Additionally, Brazil has an intermediary liability framework limiting liability for third-party content, which has been challenged as unconstitutional and is under review by the Brazilian Supreme Court.
- For example, the CFPB issued its anticipated Larger Participant Rule, effective January 2025, allowing the CFPB to conduct supervisory activities over general-use digital consumer payment applications. The Rule, which is under legal challenge by a trade association, could subject certain of our payments products to this authority.
- We may also be subject to increased risk as a result of changes to our content policies and enforcement efforts which we began to implement in January 2025 to further free expression on our platform and mitigate over-enforcement of certain of our content policies.
- Defending intellectual property litigation is often costly and can impose a significant burden on management and employees, and there can be no assurances that favorable final outcomes will be obtained in all cases.
- •initiatives designed to attract and retain users and engagement, including the use of evolving technologies such as
generativeartificial intelligence, are unsuccessful or discontinued, whether as a result of actions by us, our competitors, or other third parties, or otherwise; - •there is decreased engagement with our products as a result of taxes imposed on the use of social media or other mobile applications in certain countries, internet shutdowns, or other actions by governments that affect the accessibility of our products in their countries (for example, beginning in
the first quarter of2022, our user growth and engagement were adversely affected by the war in Ukraine and service restrictions imposed by the Russian government); - •the effectiveness of our ad targeting or degree to which users consent to, opt out of, or reduce the use of data for ads, including as a result of product changes and controls that we have implemented or may implement in the future in connection with the GDPR, ePrivacy Directive, DMA, DMCC, U.S. state privacy
laws including the CCPA,laws, and other laws, regulations, regulatory actions, or litigation, or otherwise, that impact our ability to use data for advertising purposes (for example, in response to regulatory developments in Europe, we began offering our users a "subscription for no ads" alternative in the European Union, European Economic Area, and Switzerland, and subsequently in November 2024 provided users in those regions who elect to continue receiving our services free-of-charge, supported by ads, an option to see less personalized ads); - In addition, mobile operating system and browser providers, such as Apple and Google, have implemented product changes and/or announced
futureplans to limit the ability of websites and application developers to collect and use these signals to target and measure advertising. For example, in 2021, Apple made certain changes to its products and data use policies in connection with changes to its iOS operating system that reduce our and other iOS developers' ability to target and measure advertising, which has negatively impacted, and we expect will continue to negatively impact, the size of the budgets marketers are willing to commit to us and other advertising platforms. In addition, we have implemented, and may continue to implement, product changes that give users the ability to limit our use of such data signals to improve ads and other experiences on our products and services, including changes implemented in connection with the GDPR, ePrivacy Directive, DMA, and other regulatory frameworks. - We are also developing AI technology that we make available via open source, commercial, and non-commercial license agreements to third-parties that can use this technology for use in their own products and services. We may not have insight into, or control over, the practices of third parties who may utilize such AI technologies. As such, we cannot guarantee that third parties will not use such AI technologies for improper purposes, including through the dissemination of illegal, inaccurate, defamatory or harmful content, intellectual property infringement or misappropriation, furthering bias or discrimination, cybersecurity attacks including spear phishing attacks, data privacy violations, other societal harms, including activities that threaten people's safety or well-being on- or offline, or to develop competing technologies. While we may mitigate certain risks associated with the improper use of our AI models through both technical measures and the inclusion of contractual restrictions on third-party use in any agreement between us and any third party, we cannot guarantee that such measures will be effective. Such improper use by any third party could adversely affect our business, reputation, or financial results or subject us to legal liability.
- We believe that our brands have significantly contributed to the success of our business. We also believe that maintaining and enhancing our brands is critical to maintaining and expanding our base of users, marketers, and developers. Many of our new users are referred by existing users. Maintaining and enhancing our brands will depend largely on our ability to continue to provide useful, reliable, trustworthy, and innovative products, which we may not do successfully. We may introduce new products, terms of service, or policies that users do not like, which may negatively affect our brands. Additionally, the actions of our developers or advertisers may affect our brands if users do not have a positive experience using third-party applications integrated with our products or interacting with parties that advertise through our products. We will also continue to experience media, legislative, or regulatory scrutiny of our actions or decisions regarding user privacy, data use, encryption, content, product design, algorithms, advertising, competition, generative AI, superintelligence, younger users, and other issues, including actions or decisions in connection with elections or geopolitical events, which has adversely affected, and may in the future adversely affect, our reputation and brands. For example, in January 2025, we announced certain changes to our content policies and enforcement efforts to further free expression on our platform and mitigate over-enforcement of certain of our content policies. Beginning in September 2021, we became the subject of media, legislative, and regulatory scrutiny as a result of a former employee's allegations and release of internal company documents relating to, among other things, our algorithms, advertising and user metrics, and content enforcement practices, as well as misinformation and other undesirable activity on our platform, and user well-being. In addition, in March 2018, we announced developments regarding the misuse of certain data by a developer that shared such data with third parties in violation of our terms and policies. We also may fail to respond expeditiously or appropriately to the sharing of content on our services, or to practices by advertisers or developers, that are illegal, illicit, or in violation of our policies, or fail to otherwise enforce our policies, address objectionable content or practices on our services, or address other user concerns, which has occurred in the past and which could erode confidence in our brands.
- Our brands may also be negatively affected by the actions of users that are deemed to be hostile or inappropriate to other users, by the actions of users acting under false or inauthentic identities, by the use of our products or services to disseminate information that is deemed to be misleading (or intended to manipulate opinions), by perceived or actual efforts by governments to obtain access to user information for security-related purposes or to censor certain content on our platform, by the use of our products or services for illicit or objectionable ends, including, for example, any such actions around geopolitical events or elections in the United States and around the world, by decisions or recommendations regarding content on our platform from the independent Oversight Board, by research or media reports concerning the perceived or actual impacts of our products or services on user well-being, by our decisions regarding whether to
removeenforce against content or suspend or disable participation on our platform by persons who violate our community standards or terms of service, or by any negative sentiment associated with our management. - We currently depend on the continued services and performance of our key personnel, including Mark Zuckerberg. Mr. Zuckerberg and certain other members of management participate in various high-risk activities, such as combat sports, extreme sports, and recreational aviation, which carry the risk of serious injury and death. If Mr. Zuckerberg were to become unavailable for any reason, there could be a material adverse impact on our operations. The loss of other key personnel, including members of management as well as key engineering, product development, science, research, marketing, and sales personnel, could also disrupt our operations and have an adverse effect on our business.
- Our business is subject to complex and evolving U.S. and foreign laws and regulations regarding privacy, data use, data combination, data protection, content, AI, competition, youth, safety, consumer protection, advertising, e-commerce, and other matters. Many of these laws and regulations are subject to change and uncertain interpretation, and could result in claims, changes to our products and business practices, monetary penalties, increased cost of operations, or declines in user growth or engagement, or otherwise harm our business.
- Compliance with our FTC consent order, the GDPR, U.S. state privacy laws, youth social media laws, the ePrivacy Directive, the DMA, the DSA, the OSA, and other regulatory and legislative privacy requirements require significant operational resources and modifications to our business practices, and any compliance failures may have a material adverse effect on our business, reputation, and financial results.
- If we are unable to successfully implement and comply with the mandates of the FTC consent order (including any future modifications to the order), GDPR and UK GDPR, U.S. state privacy laws, youth social media laws, ePrivacy Directive, DMA, DSA, or other regulatory or legislative requirements, or if any relevant authority believes that we are in violation of the consent order or other applicable requirements, we may be subject to regulatory or governmental investigations or lawsuits, which may result in significant monetary fines or damages (including for loss of control of data without other damage), judgments, penalties, or other remedies, and we may also be required to make additional changes to our business practices. Any of these events could have a material adverse effect on our business, reputation, and financial results.
- The trading price of our Class A common stock has been, and is likely to continue to be, volatile. Since shares of our Class A common stock were sold in our initial public offering in May 2012 at a price of $38.00 per share, our stock price has ranged from $17.55 to
$638.40$796.25 through December 31,2024.2025. In addition to the factors discussed in this Annual Report on Form 10-K, the trading price of our Class A common stock has in the past fluctuated and may in the future fluctuate significantly in response to numerous factors, many of which are beyond our control, including: