Facebook will shift its UK users into user agreements with its HQ in California, instead of its Irish unit, moving them out of reach of EU's privacy laws
SAN FRANCISCO (Reuters) - Facebook Inc will shift all its users in the United Kingdom into user agreements with the corporate headquarters …
Context & Ripple Effects
This is the second act of a playbook Facebook wrote in 2018, when it moved its 1.5B users outside Europe onto US terms of service and confined GDPR's reach to its roughly 400M EU users. The UK shift extends the same structure to a market that GDPR covered until Brexit severed it from EU law.
The move also mirrors Google, which sources said in February 2020 planned to shift UK accounts out of EU jurisdiction and into the US, where privacy protections are weaker. Meta had already flagged the UK migration in its 2023 terms update covering Facebook, Instagram, and WhatsApp, so the California-HQ agreement formalizes a transition long in motion — and it lands while Facebook simultaneously warns the Irish DPC's data-transfer order could push it to exit the EU market entirely.
First-order effects
- UK users move from agreements with Facebook's Irish unit to its California HQ, taking them out of GDPR and Irish DPC enforcement and under US terms with weaker privacy protections.
- The Irish regulator's supervisory footprint over Facebook shrinks to EU-resident users, narrowing the DPC's leverage at the same moment its data-transfer order is already threatening Facebook's EU operations.
Second-order effects
- Google's parallel UK relocation means the two largest social platforms now offer UK users the same reduced-protection baseline, removing any competitive incentive for either to voluntarily offer EU-grade terms in Britain.
- UK policymakers face a choice between accepting the US-terms status quo or building a domestic enforcement regime with enough bite to make Facebook re-contract with its Irish or a UK entity.
Third-order effects
- If the pattern holds, corporate user agreements become the primary instrument of privacy jurisdiction — regulators' reach defined by which subsidiary a user is contracted with rather than where the user lives, and post-Brexit Britain settling into a US-aligned privacy regime distinct from the EU's.
The trend: Post-Brexit, major platforms are redrawing user agreements along jurisdictional lines, moving UK users out of EU privacy law and into US terms.