🔍 Read the full analysis: Facebook’s Android Gallery Access And The €805 Million Fine Meta Faced In Italy on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Italy’s data protection authority fined Meta Platforms Ireland €805 million over Facebook’s Android feature that suggested photos and videos from users’ phone galleries. The regulator said gallery access was bundled into a general app permission, inadequately explained and enabled by default; Meta said it would appeal.
Italy’s data protection authority has fined Meta Platforms Ireland Limited €805 million, saying Facebook’s Android app accessed Italian users’ photos and videos for a posting-suggestion feature without specific, informed consent. The Garante per la protezione dei dati personali said the feature was enabled by default and ordered Meta to change how it requests permission; Meta said it would appeal.
The decision concerns Facebook’s “Get tips from your gallery while browsing Facebook” feature, available since 2023. It shows people photos and videos stored on their phones as suggestions for posts. The Garante said its investigation found that gallery access was covered by one permission for the app and multiple functions, preceded by a generic prompt about enabling other features. It said users were not adequately told that accepting could authorize gallery suggestions, and that the feature was on by default.
According to the regulator, granting the permission could allow Facebook to read the phone’s entire photo archive, usually on an ongoing basis. The Garante said people could not verify which information was actually being used. It based its decision on Article 122 of Italy’s Privacy Code, which implements the EU ePrivacy Directive. The regulator said the rule protects information on a smartphone as part of a person’s private sphere, and requires free and informed consent for access, whether or not data is transmitted or harm is shown.
The Garante ordered Meta, within 60 days, to seek separate, specific consent for the feature, explain its purpose and how to turn it off, and keep it disabled by default even for people who previously granted the system permission. Meta must report within 30 days on steps it has started and within 90 days on measures taken. The regulator said the investigation began in July 2025 after a report from the Bolzano Consumer Protection Center and included its own technical analysis.
Italy vs. Meta · decision of Nov 14, 2026
One permission, a whole gallery, a record fine
How the Facebook app for Android reached users’ photos, according to Italy’s data protection authority, and what Meta must change.
Phone gallery and app (schematic)
Suggestions from your gallerywhile you browse Facebook, available since 2023 Fully granted: the entire photo archive“usually permanently”, the Garante says Within 60 days: off by defaultand a separate, specific consent request
What the Garante found and ordered
- Since 2023“Get tips from your gallery while browsing Facebook” on Androidfeature
- 1 permissionfor the entire app and several functions, after a generic notice (“enable other features”)Garante finding
- On by defaultthe feature “was set to be active by default”Garante finding
- Whole gallerya fully granted permission lets the app read the entire photo archive, usually permanentlyGarante finding
- July 2025Bolzano Consumer Protection Center report; investigation with technical analysisinvestigation
- Nov 14, 2026Fine; within 60 days: separate consent, off by default, also for people who already allowed itdecision (Meta will appeal)
Source: Garante per la protezione dei dati personali, press release doc. web no. 10321080 (Italian with English version), Rome, Nov 14, 2026; Meta’s appeal as reported by Reuters. The full decision was not yet published. The phone and app picture is a schematic, not the real app.
Graphic: Powered by Thorsten Meyer AI
Consent Rules Reach Phone Photo Access
The case puts a large financial penalty behind a practical question for people using mobile apps: does a general operating-system permission amount to consent to every use an app may make of a device’s photos? The Garante’s answer in this case was no. Its finding focuses not on a reported breach or hack, but on how the feature was presented, whether users were told what access meant, and whether they made a specific choice.
The order could affect how Meta offers the feature to users in Italy, including people who had previously granted Android’s gallery permission. It also gives app developers and privacy regulators a concrete example of the distinction between permission to access a device function and informed agreement to a particular use. The decision does not establish that every photo-access feature is unlawful; its findings concern Facebook’s design and consent process as assessed by the Italian authority.
The Garante said the penalty reflected the number of people affected, estimated at around 20 million Android users in Italy, the duration of the conduct, a prior 2019 ruling against Meta and limited cooperation during the investigation. It also counted changes Meta made after the complaint in the company’s favour, while calling those changes late and limited to users who updated the app.
Popular right now
KitchenAid 3-Piece Pasta Roller and Cutter Set for Stand Mixers
KitchenAid Artisan Series 5-Quart Tilt-Head Stand Mixer, Dried Rose
Dyson V8 Cyclone Cordless Vacuum
As an affiliate, we earn on qualifying purchases.
How the Italian Case Developed
The Garante’s press release is dated November 14, 2026. At 21:27 UTC that day, the full decision was not yet posted on the regulator’s website, according to the source report. The authority’s announcement describes the result and orders, but the published press release is not the full ruling.
Meta argued that Italy was not the appropriate regulator and that the case should fall to Ireland’s authority. The Garante rejected that position, saying the ePrivacy rules at issue do not provide for the EU’s “one-stop shop” mechanism. The regulator also cited a previous 2019 ruling against Facebook when explaining the penalty. In June 2019, Italy’s authority fined Facebook €1 million in connection with the Cambridge Analytica case, under the country’s former privacy code.
The source report says the €805 million represents about 0.47% of Meta’s global revenue, as stated by the Garante. It also attributes to Al Jazeera the description of the penalty as the largest ever imposed by the Italian regulator. That superlative is a media characterization, not a finding quoted from the Garante’s announcement.
““access to the gallery is requested with a single permission, valid for the entire app and for multiple functions with different need””
— Italy’s data protection authority, in its English-language press release
Appeal and AI Use Remain Open
Meta’s planned appeal means the fine and the regulator’s conclusions may be challenged. The full written decision was not available on the Garante’s website at the time cited in the source report, so further reasoning and detail may emerge when it is published. The report does not specify the appeal venue, filing date or arguments Meta will make.
The proceeding concerned the gallery-suggestion feature and did not decide whether gallery content was used to train artificial intelligence. Meta denies such use, according to the source material. A separate feature launched in 2026 that processes gallery content in the cloud may be assessed separately; no finding about that feature is reported here.
The Garante’s English and Italian summaries also differ slightly in describing who remained affected by the violation. The Italian version includes people who had already granted system permission, while the English version refers to people who had not updated the app. The order itself calls for the feature to be off by default even for users who previously granted permission. The full decision may clarify the regulator’s wording and scope.
Meta Must Meet the Reporting Deadlines
Under the Garante’s order, Meta must report within 30 days on what it has begun doing and within 90 days on the measures it has taken. Within 60 days, it must provide a separate, specific consent request, explain gallery access and controls, and leave the feature off by default, including for people who previously granted Android permission.
The regulator said that if Meta misses the deadline, the feature cannot be activated for users who have not given valid consent. Meta’s appeal could affect how the decision proceeds, but the source material does not say whether the appeal would suspend the orders. The next developments are publication of the full decision, any formal appeal and the Garante’s review of Meta’s compliance reports.
Key Questions
Why did Italy fine Meta €805 million?
The Garante said Facebook’s Android gallery-suggestion feature accessed photos and videos without sufficiently specific, informed consent. It cited a general app permission, a vague notice and the feature being enabled by default.
What must Meta change?
Within 60 days, Meta must request separate consent for the feature, explain what gallery access involves and how to disable it, and keep the feature off by default even for users who previously granted system permission.
Will Meta appeal the fine?
Yes. The source report says Meta will appeal. A spokesperson described the fine as “disproportionate,” according to Reuters; the appeal’s timing and arguments were not provided.
Did the ruling find that Facebook photos trained AI?
No. The case did not determine whether gallery content was used to train AI. The source material says Meta denies that use, and a separate 2026 cloud-processing feature may be considered separately.
Source: ThorstenMeyerAI.com
