🔍 Read the full analysis: Italy’s €805 Million Fine Links Meta To Facebook’s Android Photo Galleries on ThorstenMeyerAI.com
Get business pricing on tech for your team
- Business-only prices and quantity discounts
- Tax-exempt purchasing
- Multiple users, one account, clear invoices
TL;DR
Italy’s data protection authority fined Meta Platforms Ireland Limited €805 million over Facebook’s Android feature that suggests photos from users’ phone galleries. The Garante says the feature accessed gallery content without specific, informed consent; Meta plans to appeal and has 60 days to change how consent is requested and the feature is enabled.
Italy’s data protection authority, the Garante per la protezione dei dati personali, has fined Meta Platforms Ireland Limited €805 million over a Facebook feature on Android that suggests photos and videos from users’ phone galleries. The regulator says the feature was active by default and that users were not given sufficiently specific information or consent choices; Meta says it will appeal.
The case concerns Facebook’s “Get tips from your gallery while browsing Facebook” feature, available since 2023. As described by the Garante, it displays photos and videos stored on a user’s phone as suggestions for posts. The authority said Facebook sought gallery access through a permission applying across the app and preceded it with a generic notice about enabling other features, rather than clearly explaining this particular use. It also found the feature was on by default.
The Garante said that, when fully granted, the Android permission could allow the app to read a device’s entire photo archive, usually on an ongoing basis. The regulator’s finding concerns the way access and consent were handled; the source material does not describe the case as a data breach or claim that the photos were publicly exposed. The investigation began in July 2025 after a report from the Bolzano Consumer Protection Center and included a technical analysis by the authority.
The order gives Meta 60 days to request separate, specific consent, explain the feature and how to disable it, and keep it switched off by default, including for users who previously granted Android permission. Meta must report within 30 days on steps it has begun and within 90 days on measures taken. The Garante said that if the deadline passes without compliance, the feature cannot be activated for users without valid consent. Meta plans to appeal; Reuters reported a spokesperson called the fine “disproportionate.”
Italy vs. Meta · decision of Nov 14, 2026
One permission, a whole gallery, a record fine
How the Facebook app for Android reached users’ photos, according to Italy’s data protection authority, and what Meta must change.
Phone gallery and app (schematic)
Suggestions from your gallerywhile you browse Facebook, available since 2023 Fully granted: the entire photo archive“usually permanently”, the Garante says Within 60 days: off by defaultand a separate, specific consent request
What the Garante found and ordered
- Since 2023“Get tips from your gallery while browsing Facebook” on Androidfeature
- 1 permissionfor the entire app and several functions, after a generic notice (“enable other features”)Garante finding
- On by defaultthe feature “was set to be active by default”Garante finding
- Whole gallerya fully granted permission lets the app read the entire photo archive, usually permanentlyGarante finding
- July 2025Bolzano Consumer Protection Center report; investigation with technical analysisinvestigation
- Nov 14, 2026Fine; within 60 days: separate consent, off by default, also for people who already allowed itdecision (Meta will appeal)
Source: Garante per la protezione dei dati personali, press release doc. web no. 10321080 (Italian with English version), Rome, Nov 14, 2026; Meta’s appeal as reported by Reuters. The full decision was not yet published. The phone and app picture is a schematic, not the real app.
Graphic: Powered by Thorsten Meyer AI
Why Android Photo Consent Matters
The decision addresses a practical privacy question for people using apps on their phones: does granting broad device access mean agreeing to every feature that may use it? The Garante’s finding was that a general permission and a vague prompt did not amount to adequate, informed consent for gallery-based suggestions. Its order requires a distinct choice about this feature, rather than relying on an existing system permission alone.
The ruling may also affect how Meta presents the feature to a large group of users. The regulator cited around 20 million Android users in Italy when explaining the fine. That figure is the number of users the Garante said were involved, not a count of people shown to have suffered a specific loss. The order applies to Meta’s consent and default settings for the feature; the source does not establish that the company must remove it entirely.
For users, the immediate consequence is a requirement that the feature remain off until valid consent is obtained. For app companies, the decision indicates that access granted through a phone’s operating system may not, by itself, satisfy legal requirements for a particular use. The scope of that implication will depend on the decision’s full reasoning and any outcome of Meta’s appeal.
Products Worth Considering
LG UltraGear 32GX850A-B 32-inch 4K UHD OLED Gaming Monitor
Samsung 27-inch Odyssey OLED G6 QHD Gaming Monitor
Apple MacBook Air 15-inch Laptop with M5 Chip, 16GB Memory, 512GB SSD, Midnight
As an affiliate, we earn on qualifying purchases.
How the Garante Reached Its Decision
The Garante based its findings on Article 122 of Italy’s Privacy Code, which implements the EU ePrivacy Directive. The authority said the provision protects a smartphone as part of a person’s private sphere and requires free, informed consent for access to information on the device, whether or not data are transmitted or harm is shown. That is the regulator’s stated legal basis; the full decision was not yet available on its website at 21:27 UTC on November 14, according to the source material.
Meta argued that Italy was not the appropriate regulator and that the matter should be handled by Ireland. The Garante rejected that position, reasoning that the ePrivacy rules do not use the EU’s “one-stop shop” mechanism. The authority said it considered the number of people affected, the duration, an earlier 2019 ruling against the company and what it described as limited cooperation. It also counted Meta’s changes after the complaint in its favour, while saying they were late and reached only users who updated the app.
The source compares the new penalty with a €1 million fine in 2019 against Facebook in the Cambridge Analytica case, under Italy’s former privacy code. It also reports the Garante put this fine at about 0.47% of Meta group global revenue. Al Jazeera described the penalty as the largest ever imposed by the Italian regulator; that characterization is attributed to the outlet, rather than presented here as an independently verified comparison.
Appeal and Data-Use Questions
The Garante’s full decision was not posted on its website by 21:27 UTC on November 14, according to the source material. The press release gives the authority’s findings and orders, but the full reasoning, including further detail on the legal analysis and calculation of the penalty, was not yet available there at that time. Meta’s appeal could challenge the decision, but the source does not specify when it will be filed or when a court might rule.
The case did not determine whether gallery content was used to train artificial intelligence. Meta denies such use, according to the source material. A separate gallery feature launched in 2026 that processes content in the cloud may be examined separately; its treatment is not resolved by this fine. The source also notes a difference between the Garante’s English and Italian press releases about which users remain affected: the Italian version includes people who had already granted system permission, while the English version refers to those who had not updated the app.
Meta’s Deadlines and Appeal
Meta’s first stated compliance milestone is 30 days after the order, when it must tell the Garante what action it has started. Within 60 days, it must introduce the separate consent request and keep the feature off by default, including for users who previously granted system access. A further report on measures taken is due within 90 days.
Meta has said it will appeal. The next developments to watch are the company’s formal challenge, any court action affecting the order, and the Garante’s assessment of Meta’s compliance reports. Until the full decision and any appeal filings are available, the precise scope of the legal challenge and the regulator’s detailed reasoning remain open.
Key Questions
What did Italy fine Meta for?
The Garante fined Meta Platforms Ireland Limited €805 million over Facebook’s Android feature that suggests photos and videos from a user’s phone gallery. The authority said the feature was on by default and was not explained through sufficiently specific consent.
What changes must Meta make?
Within 60 days, Meta must seek separate, specific consent, explain the gallery access and how to disable the feature, and keep it off by default, including for users who previously granted the Android permission.
Will Meta appeal the fine?
Yes. Meta said it will appeal. Reuters reported that a spokesperson called the penalty “disproportionate.” The source material does not give a filing date or describe the appeal’s likely outcome.
Did the ruling find that Meta used gallery photos to train AI?
No. The case did not decide whether gallery content was used to train AI. Meta denies such use, and a separate feature launched in 2026 that processes gallery content in the cloud may be considered separately.
When must Meta report back to the regulator?
Meta must report within 30 days on steps it has started and within 90 days on measures it has taken. The separate consent and default-off changes are due within 60 days.
Source: ThorstenMeyerAI.com
