Meta's reported organizational measures included various internal reporting procedures and policies. For example, Meta U.S. is required to promptly notify Meta Ireland where it receives a legally binding request from a U.S. public authority, unless prohibited by law. Technical measures include standard encryption protocols, asset management controls, management of Meta employee mobile devices, implementation of encryption on Meta laptops, and deployment of cryptographic protection of passwords and third party security policies. Legal measures include the data transfer agreement between Meta Ireland and Meta U.S. and the use of SCCs.