🔍 Read the full analysis: Why Italy Fined Meta €805 Million Over Facebook’s Android Photo Gallery Access on ThorstenMeyerAI.com
Get movie nights delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Italy’s data protection authority fined Meta Platforms Ireland €805 million over Facebook’s Android feature that suggests photos and videos from a user’s phone gallery. The Garante says the feature accessed users’ photo archives without specific, informed consent and ordered Meta to change how it obtains permission. Meta plans to appeal; the decision did not address whether gallery content was used to train AI.
Italy’s data protection authority has fined Meta Platforms Ireland €805 million, saying Facebook’s Android app accessed users’ photo and video galleries for a suggestion feature without obtaining specific, informed consent. The Garante ordered Meta to request separate permission for the feature and keep it turned off by default, including for users who had already granted Android photo access.
The case concerns Facebook’s “Get tips from your gallery while browsing Facebook” feature, available since 2023. It presents photos and videos stored on a phone as suggestions users may choose to post. The Garante said the app relied on a single Android permission covering the wider app and multiple functions, preceded by a generic notice about enabling other features. It found the gallery feature was on by default.
According to the regulator, a fully granted permission could allow Facebook to read a device’s entire photo archive, usually on an ongoing basis. The authority said users were not adequately told that granting the permission also enabled gallery suggestions or given a specific, informed choice about that use. The case is about access and consent, not a data breach or hack.
The Garante’s November 14 announcement gives Meta 60 days to request separate consent, explain the gallery access and how to disable it, and turn the feature off by default. Meta must report within 30 days on steps it has begun and within 90 days on measures taken. If it misses the deadline, the feature cannot be activated for users who have not given valid consent.
Italy vs. Meta · decision of Nov 14, 2026
One permission, a whole gallery, a record fine
How the Facebook app for Android reached users’ photos, according to Italy’s data protection authority, and what Meta must change.
Phone gallery and app (schematic)
Suggestions from your gallerywhile you browse Facebook, available since 2023 Fully granted: the entire photo archive“usually permanently”, the Garante says Within 60 days: off by defaultand a separate, specific consent request
What the Garante found and ordered
- Since 2023“Get tips from your gallery while browsing Facebook” on Androidfeature
- 1 permissionfor the entire app and several functions, after a generic notice (“enable other features”)Garante finding
- On by defaultthe feature “was set to be active by default”Garante finding
- Whole gallerya fully granted permission lets the app read the entire photo archive, usually permanentlyGarante finding
- July 2025Bolzano Consumer Protection Center report; investigation with technical analysisinvestigation
- Nov 14, 2026Fine; within 60 days: separate consent, off by default, also for people who already allowed itdecision (Meta will appeal)
Source: Garante per la protezione dei dati personali, press release doc. web no. 10321080 (Italian with English version), Rome, Nov 14, 2026; Meta’s appeal as reported by Reuters. The full decision was not yet published. The phone and app picture is a schematic, not the real app.
Graphic: Powered by Thorsten Meyer AI
Consent Rules Reach Phone Galleries
The ruling puts a substantial penalty behind a specific privacy principle: permission to access a phone feature does not necessarily amount to informed agreement for every use an app may make of it. The Garante said the Italian Privacy Code’s Article 122, which implements the EU ePrivacy Directive, protects a smartphone as part of a person’s private sphere. In its view, access to information on the device requires free and informed consent even if information is not transmitted or no harm is shown.
The authority said around 20 million Android users in Italy were involved. It cited the number of people affected, the duration of the conduct, a 2019 ruling against Meta and limited cooperation during the investigation when setting the fine. It also counted Meta’s changes after the complaint in the company’s favour, but described them as late and limited to users who updated the app. For app users, the order makes the practical choice clearer: an app should explain a particular gallery use and offer a separate decision about it.
Popular right now
Roborock Q7 M5+ Robot Vacuum and Mop
Ninja Flip Toaster Oven and Air Fryer SP151
Bose QuietComfort Wireless Bluetooth Headphones – Active Over‑Ear Noise Cancelling with Mic, USB‑C Charging, Deep Bass, up to 24 h Playtime,
As an affiliate, we earn on qualifying purchases.
How the Garante Built Its Case
The investigation began in July 2025 after a report from the Bolzano Consumer Protection Center, known in Italian as Centro Tutela Consumatori Utenti. The Garante said its own technical analysis supported its findings. It applied Article 122 of Italy’s Privacy Code and rejected Meta’s argument that the matter should be handled by Ireland’s authority. The regulator said ePrivacy rules do not provide the EU’s “one-stop shop” mechanism for this case.
The €805 million penalty is far above the €1 million fine the same Italian authority imposed on Facebook in 2019 over the Cambridge Analytica matter, under Italy’s former privacy code. The source account describes the new fine as about 0.47% of Meta’s global revenue. Al Jazeera characterized it as the largest fine imposed by the Italian regulator; that comparison is an outlet’s description, rather than a finding quoted from the Garante’s announcement.
The regulator’s full decision was not available on its website as of 21:27 UTC on November 14, according to the source account. The Garante’s press release, rather than the full decision, is therefore the available basis for the published findings and deadlines. The source also notes a difference between the English and Italian press-release versions about which users were still affected; the order itself requires the feature to remain off by default even for users who previously granted system permission.
Appeal and AI Use Remain Open
Meta’s appeal means the penalty and the Garante’s reasoning may be challenged; the source material does not give a filing date or set out the company’s full legal arguments. The regulator’s complete decision was not yet online at the reported check time, so some detail beyond the press release remains unavailable.
The proceeding did not determine whether Facebook gallery content was used to train AI. Meta denies such use, according to the source account. It also says a separate feature launched in 2026 processes gallery content in the cloud; whether that feature will face a separate assessment remains open. The fine should not be read as a finding about AI training or that later feature.
Meta Must Report on Compliance
Meta says it will appeal. Separately, the Garante’s order sets compliance deadlines: the company must report within 30 days on what it has started and within 90 days on the measures it has taken. Within 60 days, it must introduce a separate, specific consent request and keep the feature off by default, including for users who already granted Android’s system permission.
The next developments are whether Meta changes the feature on schedule, what its appeal argues and whether the full decision provides further detail. A possible review of the 2026 cloud-processing feature would be a separate matter; no outcome or timetable for such an assessment has been confirmed in the source material.
Key Questions
What did Italy fine Meta for?
The Garante fined Meta over Facebook’s Android gallery-suggestion feature. It said the app accessed photos and videos without adequately explaining that use or obtaining separate, informed consent.
What must Meta change?
Within 60 days, Meta must request specific consent for the feature, explain the gallery access and how to disable it, and keep the feature off by default—even for users who previously granted system permission.
Will the fine affect all Facebook users?
The decision concerns Facebook’s Android gallery feature and the Garante cited around 20 million Android users in Italy. The source material does not describe a direct change to Facebook use outside the scope of the order.
Did the decision find that Facebook used photos to train AI?
No. The case did not address AI training. Meta denies using the gallery content for that purpose, and a separate cloud-processing feature launched in 2026 may be assessed separately.
What happens after the fine?
Meta says it will appeal. It must also meet the Garante’s 60-day feature deadline and report on its response within 30 and 90 days.
Source: ThorstenMeyerAI.com
