🔍 Read the full analysis: A Breakdown Of The €805 Million Italy Fine Over Meta’s Facebook Android Access on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Italy’s data protection authority fined Meta Platforms Ireland €805 million over a Facebook Android feature that suggested photos and videos from users’ phone galleries. The regulator said the feature accessed gallery content without specific, informed consent; Meta said it will appeal. The order requires a separate consent request, the feature off by default, and reports to the authority within set deadlines.
Italy’s data protection authority has fined Meta Platforms Ireland Limited €805 million over a Facebook feature on Android that suggests photos and videos from users’ phone galleries, finding that the company did not obtain specific, informed consent for the access. The Garante ordered Meta to request separate consent and keep the feature off by default, while Meta said it would appeal.
The case concerns Facebook’s “Get tips from your gallery while browsing Facebook” feature, available since 2023. It displays photos and videos stored on a user’s phone as suggestions for posts. In a press release dated November 14, the Garante said the app relied on a single permission covering the app’s multiple functions, preceded by a generic prompt to “enable other features.” It also said the gallery feature was on by default.
According to the regulator, granting the permission allowed the app to read the device’s entire photo archive, usually on an ongoing basis, without making clear what information was being used. The Garante said its investigation began in July 2025 after a report from the Bolzano Consumer Protection Center and included the authority’s own technical analysis. These are the regulator’s findings; Meta’s planned appeal means the dispute is not settled.
The order gives Meta 60 days to introduce a separate, specific consent request explaining the gallery access and how to disable it, and to keep the feature off by default, including for users who previously granted system permission. Meta must report within 30 days on measures it has begun and within 90 days on steps it has taken. If it misses the compliance deadline, the feature cannot be activated for users without valid consent.
Italy vs. Meta · decision of Nov 14, 2026
One permission, a whole gallery, a record fine
How the Facebook app for Android reached users’ photos, according to Italy’s data protection authority, and what Meta must change.
Phone gallery and app (schematic)
Suggestions from your gallerywhile you browse Facebook, available since 2023 Fully granted: the entire photo archive“usually permanently”, the Garante says Within 60 days: off by defaultand a separate, specific consent request
What the Garante found and ordered
- Since 2023“Get tips from your gallery while browsing Facebook” on Androidfeature
- 1 permissionfor the entire app and several functions, after a generic notice (“enable other features”)Garante finding
- On by defaultthe feature “was set to be active by default”Garante finding
- Whole gallerya fully granted permission lets the app read the entire photo archive, usually permanentlyGarante finding
- July 2025Bolzano Consumer Protection Center report; investigation with technical analysisinvestigation
- Nov 14, 2026Fine; within 60 days: separate consent, off by default, also for people who already allowed itdecision (Meta will appeal)
Source: Garante per la protezione dei dati personali, press release doc. web no. 10321080 (Italian with English version), Rome, Nov 14, 2026; Meta’s appeal as reported by Reuters. The full decision was not yet published. The phone and app picture is a schematic, not the real app.
Graphic: Powered by Thorsten Meyer AI
Why Android Gallery Consent Matters
The ruling puts a substantial financial penalty behind a question faced by many mobile apps: whether broad access granted at the operating-system level amounts to agreement to a particular use of personal content. The Garante said the issue was not whether users suffered demonstrable harm or whether information was transmitted elsewhere. Under its interpretation of Article 122 of Italy’s Privacy Code, which implements the EU ePrivacy Directive, access to information on a smartphone requires free and informed consent.
The regulator cited around 20 million Android users in Italy as one factor in setting the fine, along with the duration of the violation, a prior 2019 ruling against Meta and what it described as limited cooperation. It also took account of changes Meta made after the complaint, but said they were late and applied only to people who updated the app. The amount is therefore tied to the authority’s assessment of the case and should not be read as a general tariff for app permissions.
For users, the order requires a clearer choice about this particular gallery feature, rather than relying on a broad permission or a default setting. For app developers, the decision signals the regulator’s view that device-level authorization may not, by itself, explain or authorize every separate use of data on a phone.
Products Worth Considering
Apple AirPods Pro 3 Wireless Earbuds with Active Noise Cancellation
Bose Smart Dolby Atmos Soundbar, All-in-One Soundbar for TV, A.I. Dialogue Mode, Voice Control and Amazon Alexa Built-in, Supports Bluetooth
Jackery Explorer 2000 v2 Portable Power Station with Two 200W Solar Panels
As an affiliate, we earn on qualifying purchases.
How the Consent Dispute Began
The Garante’s case focused on the design and consent process for the Android feature, not on a reported hack or data leak. Its investigation followed a complaint from the Bolzano Consumer Protection Center in July 2025. The authority said Meta argued that the case should be handled by Ireland’s regulator, but rejected that position, reasoning that the ePrivacy rules at issue do not use the EU’s “one-stop shop” mechanism.
The scale of the penalty contrasts with a €1 million fine imposed on Facebook in 2019 by the same Italian authority in the Cambridge Analytica case, under Italy’s former privacy code. The Garante said the new fine was about 0.47% of Meta group global revenue. Al Jazeera described it as the largest fine ever imposed by the Italian regulator; that characterization is attributed to the outlet, not an independent ranking presented in the authority’s release.
The Garante’s full decision was not yet available on its website at 21:27 UTC on November 14, according to the source report. The authority’s press release, rather than the full decision, is therefore the available basis for the detailed findings and order at that time.
Appeal, AI Use and Decision Details
Meta’s appeal means the outcome may be contested, and the full written decision was not available on the Garante’s website at the time reported. The press release does not provide all the reasoning or evidence that may appear in that decision. The authority’s English and Italian summaries also differ slightly on who remains affected: the English version refers to people who have not updated the app, while the Italian version also mentions people who already granted system permission. The order itself says the feature must be off by default even for users who previously granted permission.
The case did not determine whether gallery content was used to train artificial intelligence systems. Meta denies using the content for AI training, according to the source report. A separate gallery feature launched in 2026 that processes content in the cloud may be examined independently; its status is not resolved by this ruling. The available material also does not establish whether Meta has appealed formally or how long any appeal process will take.
Meta’s Deadlines and Appeal
Meta’s next immediate obligations under the order are to report within 30 days on what it has begun and, within 60 days, put the separate consent request and default-off setting in place. A further report on completed measures is due within 90 days. The Garante said users without valid consent must not be able to activate the feature after the compliance deadline.
Meta has said it will appeal. The next substantive developments are likely to include the publication of the full decision, details of any appeal, and evidence of whether the company meets the regulator’s deadlines. Until those details emerge, the fine and the Garante’s findings are confirmed as the authority’s announced position, while the final legal outcome remains open.
Key Questions
What did Italy fine Meta for?
The Garante fined Meta €805 million over Facebook’s Android feature that suggests photos and videos from a user’s phone gallery. The authority said the feature accessed gallery content without specific, informed consent.
What changes must Meta make?
Within 60 days, Meta must seek separate consent for the feature, explain the gallery access and how to disable it, and keep it off by default, including for users who previously granted system permission.
Is the fine about Meta training AI with users’ photos?
No. The ruling described in the regulator’s announcement concerns gallery access and consent. It did not determine whether the content was used to train AI; Meta denies such use, according to the source report.
Will Meta challenge the decision?
Yes. Meta said it will appeal and a spokesperson called the fine “disproportionate,” according to Reuters. The timing and outcome of any appeal were not stated in the available material.
Source: ThorstenMeyerAI.com
