🔍 Read the full analysis: Italy Fines Meta After Facebook’s Access To Android Photo Galleries on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Italy’s data protection authority fined Meta Platforms Ireland €805 million over a Facebook Android feature that suggested photos from users’ phone galleries. The regulator says the feature accessed galleries without specific, informed consent; Meta plans to appeal.
Italy’s data protection authority has fined Meta Platforms Ireland Limited €805 million over a Facebook feature that suggested photos and videos from Android users’ phone galleries, saying the company did not obtain specific, informed consent for that access. The Garante ordered Meta to keep the feature off by default and seek separate consent within 60 days; Meta says it will appeal.
The decision concerns Facebook’s “Get tips from your gallery while browsing Facebook” feature, available since 2023. It displays images and videos from a phone gallery as possible posts while a person browses Facebook. The Garante said its investigation found that gallery access was covered by a permission applying to the app and several functions, rather than a distinct request explaining this particular use. It also said a generic notice about enabling other features appeared before the permission and that the gallery feature was on by default.
According to the regulator, granting the system permission could allow the app to read the device’s entire photo archive, usually on an ongoing basis. The authority said users could not tell from the permission what gallery information was actually being used. It treated the matter as an issue of access to information on a phone, not as a finding that a data breach or hack had occurred.
The Garante’s press release is dated November 14, 2026. It said Meta must request separate, clear consent and explain the feature and how to disable it within 60 days. The feature must remain off by default, including for people who previously granted Android’s system permission. Meta must report within 30 days on the steps it has started and within 90 days on measures taken. The full decision was not yet posted on the authority’s website at 21:27 UTC, according to the source report.
Italy vs. Meta · decision of Nov 14, 2026
One permission, a whole gallery, a record fine
How the Facebook app for Android reached users’ photos, according to Italy’s data protection authority, and what Meta must change.
Phone gallery and app (schematic)
Suggestions from your gallerywhile you browse Facebook, available since 2023 Fully granted: the entire photo archive“usually permanently”, the Garante says Within 60 days: off by defaultand a separate, specific consent request
What the Garante found and ordered
- Since 2023“Get tips from your gallery while browsing Facebook” on Androidfeature
- 1 permissionfor the entire app and several functions, after a generic notice (“enable other features”)Garante finding
- On by defaultthe feature “was set to be active by default”Garante finding
- Whole gallerya fully granted permission lets the app read the entire photo archive, usually permanentlyGarante finding
- July 2025Bolzano Consumer Protection Center report; investigation with technical analysisinvestigation
- Nov 14, 2026Fine; within 60 days: separate consent, off by default, also for people who already allowed itdecision (Meta will appeal)
Source: Garante per la protezione dei dati personali, press release doc. web no. 10321080 (Italian with English version), Rome, Nov 14, 2026; Meta’s appeal as reported by Reuters. The full decision was not yet published. The phone and app picture is a schematic, not the real app.
Graphic: Powered by Thorsten Meyer AI
Consent Rules for Phone Galleries
The order makes the distinction between granting an app broad technical access and agreeing to a particular use of that access central to this case. A person may permit an app to access photos through Android, but the Garante says that permission alone did not adequately explain or authorize Facebook’s gallery-suggestion feature. That position puts the design and timing of consent prompts at the center of the enforcement action.
The regulator said it considered the number of people affected—about 20 million Android users in Italy—the duration of the conduct, an earlier ruling against Meta and what it described as limited cooperation during the investigation. It also credited changes Meta made after the complaint, while calling them late and limited to users who updated the app. The authority put the fine at about 0.47% of Meta’s global revenue, according to its account.
For users, the immediate practical effect will depend on whether Meta changes the feature as ordered and how the appeal proceeds. For app makers, the decision is a warning that a platform-level permission may not, by itself, meet a regulator’s standard for clear agreement to a specific feature. The case does not establish that every photo-access request is unlawful; its findings concern Facebook’s design and the Italian regulator’s application of the law.
Products Worth Considering
Bose QuietComfort Headphones – Wireless Bluetooth Over-Ear Noise Cancelling Headphones, Petal Pink Limited Edition
Apple Watch Ultra 4 GPS + Cellular, 49 mm
Logitech MX Master 4 Ergonomic Wireless Mouse with Haptic Feedback, Graphite
As an affiliate, we earn on qualifying purchases.
How the Investigation Began
The Garante said it opened its investigation in July 2025 after receiving a report from the Bolzano Consumer Protection Center. The authority said it also carried out technical analysis. Its legal basis was Article 122 of Italy’s Privacy Code, which implements the EU ePrivacy Directive. In the regulator’s interpretation, that provision protects a smartphone as part of a person’s private sphere, and access to information on the device requires free and informed consent.
Meta argued that Italy was not the appropriate regulator and that the case should be handled by Ireland. The Garante rejected that argument, saying ePrivacy rules do not use the EU’s “one-stop shop” mechanism. The authority also referred to a 2019 ruling against Facebook when setting the penalty. In that earlier case, Italy fined Facebook €1 million over the Cambridge Analytica matter under the country’s former privacy code, according to the source report.
The Garante described the current violation as continuing for users who had not updated the app. Its Italian-language statement also referred to people who had already granted system permission, a detail not included in the English version cited in the source report. The order to switch the feature off by default for prior permission holders addresses that group directly.
“Access to the gallery is requested with a single permission, valid for the entire app and for multiple functions with different need.”
— Italy’s data protection authority, in its English-language press release
Appeal and AI Use Remain Open
Meta’s appeal means the regulator’s decision may face further legal review; the source material does not give a filing date or grounds for the appeal. The full decision was also unavailable on the Garante’s website at the time reported, so its complete reasoning and the precise legal and factual details cannot yet be assessed from the press release alone.
The case did not determine whether photos or other gallery content were used to train artificial-intelligence systems. Meta denies such use, according to the source report. A separate feature launched in 2026 that processes gallery content in the cloud may be assessed separately; the regulator’s present action does not resolve that issue. It is also not clear from the available material how Meta will implement the consent changes across app versions or how the Garante will judge compliance.
Meta’s Deadlines and Appeal
Under the Garante’s order, Meta must provide an initial account of steps underway within 30 days and report the measures taken within 90 days. Within 60 days, it must present a separate consent request that explains the gallery feature and how users can disable it, and keep the feature turned off by default, including for people who already granted system access.
The regulator said the feature cannot be activated for users who have not given valid consent if Meta misses the deadline. Meta’s announced appeal is the next legal development to watch. The full decision, the company’s implementation and any further action by the authority will clarify how the ruling is applied.
Key Questions
Why did Italy fine Meta?
The Garante said Facebook’s Android photo-suggestion feature accessed users’ galleries without a separate, sufficiently clear request for consent. The fine was €805 million.
What must Meta change?
Within 60 days, Meta must seek separate, specific consent, explain the gallery access and how to disable the feature, and keep it off by default, including for people who previously granted system permission.
Did the case find that Meta used photos to train AI?
No. The case did not decide whether gallery content was used for AI training. The source report says Meta denies such use, and a cloud-processing feature launched in 2026 may be considered separately.
Will Meta challenge the fine?
Yes. Meta said it would appeal. Reuters reported that a Meta spokesperson called the fine “disproportionate.”
How many users did the regulator say were affected?
The Garante cited about 20 million Android users in Italy when describing the scale it considered in setting the penalty. That figure is the regulator’s stated estimate in the source material.
Source: ThorstenMeyerAI.com
