🔍 Read the full analysis: Italy Fines Meta €805 Million In Case Over Facebook’s Android Photo Galleries on ThorstenMeyerAI.com
Prime made for students and young adults
- Fast, free delivery for dorm and study essentials
- Prime Video and Amazon Music included
- Member-only deals
TL;DR
Italy’s data protection authority fined Meta Platforms Ireland €805 million over Facebook’s Android feature that suggests photos and videos from a user’s phone gallery. The regulator said the feature accessed galleries without specific, informed consent; Meta plans to appeal. The ruling does not decide whether gallery content was used to train AI.
Italy’s data protection authority has fined Meta Platforms Ireland Limited €805 million over a Facebook feature on Android that suggests photos and videos from users’ phone galleries while they browse. The Garante said the feature was enabled by default and did not have separate, informed consent; it ordered Meta to change how permission is requested and keep the feature off by default. Meta said it will appeal.
The Garante’s November 14 announcement concerns Facebook’s “Get tips from your gallery while browsing Facebook” feature, available since 2023. According to the authority, it presents gallery photos and videos as possible posts. The regulator said one Android permission covered the app’s different functions, while a generic prompt to “enable other features” did not make clear that users were authorizing gallery suggestions. It also said the feature was on by default.
The authority said that, once granted, the permission could allow the app to read a device’s entire photo archive, usually on an ongoing basis, without users or the regulator being able to verify which information was used. The Garante said its investigation began in July 2025 after a report from the Bolzano Consumer Protection Center and included a technical analysis by the authority. It based its decision on Article 122 of Italy’s Privacy Code, which implements the EU ePrivacy Directive.
Under the order, Meta has 60 days to seek separate, specific consent, explain the feature and gallery access, and provide information on how to disable it. The feature must remain off by default, including for users who already granted the Android system permission. Meta must report within 30 days on steps it has begun and within 90 days on measures taken. If Meta misses the deadline, the feature cannot be activated for users without valid consent.
Italy vs. Meta · decision of Nov 14, 2026
One permission, a whole gallery, a record fine
How the Facebook app for Android reached users’ photos, according to Italy’s data protection authority, and what Meta must change.
Phone gallery and app (schematic)
Suggestions from your gallerywhile you browse Facebook, available since 2023 Fully granted: the entire photo archive“usually permanently”, the Garante says Within 60 days: off by defaultand a separate, specific consent request
What the Garante found and ordered
- Since 2023“Get tips from your gallery while browsing Facebook” on Androidfeature
- 1 permissionfor the entire app and several functions, after a generic notice (“enable other features”)Garante finding
- On by defaultthe feature “was set to be active by default”Garante finding
- Whole gallerya fully granted permission lets the app read the entire photo archive, usually permanentlyGarante finding
- July 2025Bolzano Consumer Protection Center report; investigation with technical analysisinvestigation
- Nov 14, 2026Fine; within 60 days: separate consent, off by default, also for people who already allowed itdecision (Meta will appeal)
Source: Garante per la protezione dei dati personali, press release doc. web no. 10321080 (Italian with English version), Rome, Nov 14, 2026; Meta’s appeal as reported by Reuters. The full decision was not yet published. The phone and app picture is a schematic, not the real app.
Graphic: Powered by Thorsten Meyer AI
A Major Consent Test for Apps
The decision focuses on whether a broad device permission amounts to meaningful agreement for a particular use. The Garante said Italian law protects the smartphone as part of a person’s private sphere, and that access to information on it requires free and informed consent, whether or not data is transmitted or harm is shown. That interpretation could affect how apps that request access to photos explain distinct uses of that access.
The regulator said it considered the number of people affected, the duration of the conduct, a 2019 ruling against Meta and what it described as limited cooperation during the investigation. It put the affected population at about 20 million Android users in Italy. The Garante also said Meta’s changes after the complaint counted in the company’s favor, but were late and applied only to people who updated the app.
The €805 million penalty is the amount imposed by the decision. The source account says the Garante described it as about 0.47% of Meta group global revenue. The authority’s findings concern access, notice and consent; this is not described as a data breach or a hacking incident.
Popular right now
KitchenAid 3-Piece Pasta Roller and Cutter Set for Stand Mixers
Sony WH-1000XM6 Wireless Noise-Canceling Headphones, Black
De'Longhi Classic Signature Espresso Machine
As an affiliate, we earn on qualifying purchases.
How the Gallery Feature Was Reviewed
The case began with a complaint from the Bolzano Consumer Protection Center, which prompted the Garante’s investigation in July 2025. The decision concerns the Android feature that offers gallery items as posting suggestions during Facebook browsing. The regulator’s legal basis was Article 122 of Italy’s Privacy Code, rather than a finding that photos had been leaked or used for a particular secondary purpose.
Meta argued that the case should be handled by Ireland’s data protection authority. The Garante rejected that argument, saying the ePrivacy rules at issue do not use the EU’s “one-stop shop” mechanism. The authority’s press release was dated Rome, November 14, 2026. At the time reported in the source material, the full decision had not yet appeared on the Garante website, so the public account was based on its release.
The source compares the penalty with a €1 million fine imposed on Facebook by the same authority in 2019 in the Cambridge Analytica case, under Italy’s former privacy code. That earlier case is a point of scale, but it involved different conduct and legal circumstances. The current ruling is specifically about the consent process for gallery suggestions.
Appeal and AI Use Remain Open
Meta’s planned appeal means the penalty and the regulator’s findings may be contested; the source material does not specify when the appeal will be filed or what arguments Meta will make. The full written decision was not yet available on the Garante website at the time reported, leaving some reasoning and procedural detail to be confirmed from the decision itself.
The case does not determine whether gallery content was used to train AI. Meta denies that use, according to the source material, but the Garante’s decision as described addresses the Android photo-suggestion feature and consent. A separate feature launched in 2026 that processes gallery content in the cloud may be assessed separately. The source also notes a difference between the authority’s English and Italian summaries about which users remained affected; the order itself says the feature must be off by default even for people who previously granted system permission.
Meta’s Deadlines and Appeal
Meta is expected to challenge the fine, though no appeal date or court timetable is provided in the source material. Separately, the Garante’s order sets compliance milestones: Meta must report within 30 days on what it has started, make the consent and default-setting changes within 60 days, and report within 90 days on what it has done.
The next developments to watch are the publication of the full decision, Meta’s appeal and any evidence the company submits to show compliance. The regulator may also consider the 2026 cloud-processing feature separately; no decision on that feature is reported. Until those steps occur, the ruling’s final status and any broader implications for other app permissions remain unresolved.
Key Questions
Why did Italy fine Meta €805 million?
The Garante said Facebook’s Android gallery-suggestion feature accessed photos, videos and related information without a sufficiently specific and informed consent process. It cited a permission covering multiple app functions, a generic notice and the feature being on by default.
What must Meta change?
Within 60 days, Meta must request separate, specific consent, explain gallery access and how to disable the feature, and keep it off by default even for users who previously granted Android system permission.
Will Meta challenge the fine?
Yes. Meta said it will appeal. A filing date and details of its appeal arguments were not provided in the source material.
Did the ruling find that Facebook used photos to train AI?
No such finding is described. The case addressed consent for the Android gallery-suggestion feature. Meta denies using the gallery content for AI training, and a separate 2026 cloud-processing feature may be reviewed independently.
How many users did the Garante say were affected?
The authority cited about 20 million Android users in Italy when describing the scale of the case. That figure is the Garante’s stated estimate, not an independently verified count in the source material.
Source: ThorstenMeyerAI.com
