🔍 Read the full analysis: Why Meta Owes Italy €805 Million Over Facebook’s Android Photo Access on ThorstenMeyerAI.com
Get business pricing on office and shipping supplies
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Italy’s data protection authority fined Meta Platforms Ireland €805 million over a Facebook Android feature that suggests photos and videos from users’ phone galleries. The regulator said the feature accessed gallery content without specific, informed consent; Meta plans to appeal. The decision does not determine whether gallery content was used to train AI.
Italy’s data protection authority has fined Meta Platforms Ireland Limited €805 million over a Facebook feature on Android that suggests photos and videos from a user’s phone gallery while they browse. The Garante per la protezione dei dati personali said the feature accessed gallery content without specific, informed consent and ordered Meta to change how it is presented and enabled; Meta says it will appeal.
The decision concerns Facebook’s “Get tips from your gallery while browsing Facebook” feature, available since 2023. It displays pictures and videos stored on a phone as suggestions for posts. The Garante said the feature was active by default and that gallery access was covered by a single Android permission used across the app for different functions. Before the permission request, users received a general notice about enabling other features, the authority said, which did not clearly explain the gallery suggestions.
According to the regulator, granting the permission can allow the app to read the phone’s entire photo archive, usually on an ongoing basis. The Garante said users and the authority could not verify which information was actually used. Its case is about access and consent under Italy’s Privacy Code—not a finding of a data breach or of unauthorized disclosure to another party.
Within 60 days, Meta must seek separate, specific consent for the feature, explain its purpose and gallery access, describe how to disable it, and keep it off by default, including for people who previously granted the system permission. The company must report within 30 days on steps it has started and within 90 days on measures taken. The authority said the fine reflected the number of people affected, the duration of the conduct, a prior 2019 ruling and limited cooperation during the investigation. It also took account of changes Meta made after the complaint, which it characterized as late and limited to people who updated the app.
Italy vs. Meta · decision of Nov 14, 2026
One permission, a whole gallery, a record fine
How the Facebook app for Android reached users’ photos, according to Italy’s data protection authority, and what Meta must change.
Phone gallery and app (schematic)
Suggestions from your gallerywhile you browse Facebook, available since 2023 Fully granted: the entire photo archive“usually permanently”, the Garante says Within 60 days: off by defaultand a separate, specific consent request
What the Garante found and ordered
- Since 2023“Get tips from your gallery while browsing Facebook” on Androidfeature
- 1 permissionfor the entire app and several functions, after a generic notice (“enable other features”)Garante finding
- On by defaultthe feature “was set to be active by default”Garante finding
- Whole gallerya fully granted permission lets the app read the entire photo archive, usually permanentlyGarante finding
- July 2025Bolzano Consumer Protection Center report; investigation with technical analysisinvestigation
- Nov 14, 2026Fine; within 60 days: separate consent, off by default, also for people who already allowed itdecision (Meta will appeal)
Source: Garante per la protezione dei dati personali, press release doc. web no. 10321080 (Italian with English version), Rome, Nov 14, 2026; Meta’s appeal as reported by Reuters. The full decision was not yet published. The phone and app picture is a schematic, not the real app.
Graphic: Powered by Thorsten Meyer AI
Consent Rules for Phone Galleries
The decision concerns whether a general operating-system permission is sufficient when an app uses access for a particular feature. The Garante’s position is that permission to access a gallery is not, by itself, specific consent to use its contents for photo suggestions. Its order requires a separate choice and a feature that starts turned off.
The authority said about 20 million Android users in Italy were involved. The figure was among the factors the regulator considered in setting the penalty; it does not mean that every user’s photos were shown, posted or otherwise used in the same way. The decision may also be relevant to app developers that rely on broad permissions for several functions, including how they explain each use and whether users can choose separately.
The Garante said the fine was about 0.47% of Meta’s global revenue. The case concerns how the app obtained access and whether the consent process met Italian rules, not a hack or a confirmed leak. Meta’s appeal means the decision and its financial consequences may be contested.
Popular right now
Dyson V15 Detect Cordless Vacuum
TCL 65-Inch 4K UHD Smart LED TV (65S425)
Dyson V9 Motorbar Cordless Vacuum
As an affiliate, we earn on qualifying purchases.
How the Investigation Began
The Garante said its investigation began in July 2025, following a report from the Bolzano Consumer Protection Center, and included a technical analysis by the authority. It assessed the feature under Article 122 of Italy’s Privacy Code, which implements the EU ePrivacy Directive. The regulator said the rule protects a smartphone as part of a person’s private sphere and requires free, informed consent for access to information on the device, whether or not data is transmitted or harm is shown.
Meta argued that Italy was not the proper authority and that the matter belonged with Ireland’s regulator. The Garante rejected that argument, saying the ePrivacy rules at issue do not use the EU’s “one-stop shop” process. The authority also cited a 2019 ruling against Facebook when describing factors used to set the new fine. The source report compares the earlier case’s €1 million penalty with the current one, but the cases involved different legal and factual circumstances.
The Garante published its announcement on November 14, 2026. The full decision was not yet on the authority’s website at 21:27 UTC that day, according to the source report. The authority’s press release therefore provides the available account of its findings and orders; further detail may appear in the full text.
Appeal and AI Use Remain Open
Meta’s appeal could challenge the regulator’s findings, jurisdiction or penalty, but the grounds and timetable were not specified in the available material. The full written decision was also not yet posted when the source report checked the Garante’s website, so further reasoning may become available.
The case does not decide whether Facebook used gallery content to train artificial intelligence systems. Meta denies that it did, according to the source report. A separate feature launched in 2026 that processes gallery content in the cloud may be examined separately; the Garante’s action described here does not establish what that feature does or whether it complies with privacy rules.
The regulator’s English and Italian summaries differ slightly on which users were still affected. The English version refers to people who had not updated the app; the Italian version also refers to people who had already granted system permission. The order’s instruction to keep the feature off by default even for those users addresses the practical issue, but the full decision may clarify the scope and status of the conduct.
Deadlines and Appeal Proceedings
Meta is expected to pursue an appeal, while the Garante’s order sets reporting and compliance milestones. The company must inform the authority within 30 days about measures it has begun, make the consent and default-setting changes within 60 days, and report within 90 days on what it has done. The source material does not identify the precise calendar dates for those deadlines beyond saying they run from the order.
The regulator said that if Meta misses the 60-day deadline, the feature cannot be activated for users who have not given valid consent. Further developments may include Meta’s appeal, publication of the full decision and the authority’s assessment of the company’s compliance reports. No separate finding about AI training or the 2026 cloud-processing feature has been announced in this case.
Key Questions
Why did Italy fine Meta €805 million?
The Garante said Facebook’s Android gallery-suggestion feature accessed photos, videos and related information without a separate, sufficiently clear consent request. It also cited the feature being on by default and the use of a broad app permission.
What must Meta change?
Within 60 days, Meta must ask for separate, specific consent, explain the feature and how to disable it, and keep it off by default, including for users who previously granted Android gallery permission.
Did the decision find that Facebook used photos to train AI?
No. The case described in the regulator’s announcement did not determine whether gallery content was used for AI training. The source report says Meta denies such use.
Will Meta challenge the fine?
Yes. Meta said it would appeal, according to Reuters. The grounds and timing of the appeal were not specified in the available material.
How many users did the regulator say were involved?
The Garante cited about 20 million Android users in Italy when explaining how it set the penalty. That is the authority’s estimate of the number involved, not a claim that every user’s content was used identically.
Source: ThorstenMeyerAI.com
