5. How we identify and address salient human rights risks Privacy “Getting privacy right is a continual, collective investment across our company and is the responsibility of everyone at Meta to advance our mission.” Michel Protti, Chief Privacy Officer for Product The Right to Privacy is core to Meta’s mission and a necessary condition for the realization of other human rights, such as freedom of expression, freedom of assembly and association, and freedom of belief and religion. We are committed to improve and adapt our practices and policies to anticipate and address challenges to people’s privacy on our services and apps. Examples of potential inherent salient human rights risks identified in CSRA Examples of how Meta addresses the potential risk Overbroad or unnecessary government We protect users from unlawful or overbroad demands for user data government data requests through our dedicated Law Enforcement Response team. We push back on government requests that do not meet internationally recognized standards, including those set out in our Corporate Human Rights Policy, and challenge them in court if necessary. We respond to valid legal requests where we have a good-faith belief that we’re required by law to do so. We also respond to certain legal requests where not compelled by law but where we have a good-faith belief that a response: • is required by law in another jurisdiction in which a user may be located, • affects users in that jurisdiction, and • is consistent with internationally recognized standards, including our Corporate Human Rights Policy. Human rights report 16