Technology companies face growing scrutiny over not only how they protect data, but also how their products are designed and affect users.
That issue is at the center of Meta’s landmark settlement with a coalition of U.S. states and territories. Meta has agreed to pay at least $12.2 billion, with the settlement potentially reaching up to $17.1 billion, while making significant changes to Facebook and Instagram. The agreement resolves allegations that Meta designed its platforms with addictive features, exposed young users to harm, and misled the public about platform safety. The settlement remains subject to court approval.
For MSPs, the case offers broader lessons about technology governance, transparency, compliance, and responsibility.
1. Technology Risk Goes Beyond Cybersecurity
The Meta case demonstrates that technology risk isn’t limited to ransomware, breaches, and compromised accounts. The states’ claims focused on how Meta’s platforms were designed and their alleged impact on children and teens.
For MSPs, that reinforces the importance of considering privacy, responsible technology use, and regulatory exposure alongside traditional security threats.
MSP Action: Expand client risk assessments to include privacy, data practices, acceptable use, and regulatory considerations.
2. Default Safeguards Can Make a Difference
The settlement requires changes for younger Facebook and Instagram users, including daily time limits, nighttime restrictions, limits on notifications, stronger age-assurance measures, and additional parental controls.
The broader lesson is that protections can be more effective when they’re built into technology rather than relying entirely on users to enable them.
MSP Action: Identify opportunities to strengthen default privacy, access, and security settings, particularly where sensitive users or information are involved.
3. Transparency Must Be Backed by Results
Technology providers need to accurately communicate how well their safeguards work.
During the trial, Instagram head Adam Mosseri acknowledged promoting teen safety tools without disclosing low adoption rates during earlier testing. Other testimony questioned the effectiveness of some protections.
For MSPs, promising protection is different from demonstrating that controls actually deliver it.
MSP Action: Use testing, reporting, and measurable outcomes to show clients whether security and compliance controls are achieving their intended results.
4. Compliance Requires Ongoing Oversight
Meta’s obligations don’t end when the settlement takes effect. Compliance with the agreement will be independently monitored for years.
That reinforces an important principle for MSPs: governance and compliance aren’t one-time projects. Policies and controls need to evolve alongside technology and regulatory requirements.
MSP Action: Establish recurring reviews of client policies, configurations, documentation, and controls to identify gaps and changing requirements.
5. Regulation Can Reshape Technology
The settlement goes beyond financial penalties by requiring Meta to change aspects of the Facebook and Instagram experience for younger users.
Some provisions also depend on whether other major social platforms adopt similar protections, demonstrating how regulatory action involving one company can potentially influence a broader technology ecosystem.
MSP Action: Monitor regulatory developments affecting major technology platforms and translate relevant changes into practical guidance for clients.
What MSPs Should Take Away
Meta’s landmark settlement centers on social media, but its broader lessons extend across the technology industry.
Privacy, governance, transparency, and responsible technology use are increasingly part of the risk landscape. For MSPs, that creates an opportunity to provide value beyond managing infrastructure and cybersecurity.
Helping clients understand emerging technology risks, establish safeguards, document controls, and adapt to changing requirements can strengthen the MSP’s position as a trusted advisor as technology regulation continues to evolve.