🔍 Read the full analysis: Italy Hits Meta With €805 Million Fine In Facebook Android Photos Case on ThorstenMeyerAI.com
Get hardware and tech essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Italy’s data protection authority fined Meta Platforms Ireland €805 million over Facebook’s Android photo-suggestion feature, saying users were not given adequate information or a specific consent choice. Meta says it will appeal; the regulator also ordered changes to how the feature is enabled and requires the company to report on its response.
Italy’s data protection authority has fined Meta Platforms Ireland Limited €805 million, saying Facebook’s Android app accessed Italian users’ photos, videos and related metadata for a gallery-suggestion feature without sufficiently specific consent or clear information. The Garante ordered Meta to change how the feature works and said the company must report on its response; Meta has said it will appeal.
The case concerns Facebook’s “Get tips from your gallery while browsing Facebook” feature, which suggests photos and videos stored on a phone that users might choose to post. The Garante said the feature had been available since 2023 and was active by default. Its investigation began in July 2025 after a report from the Bolzano Consumer Protection Center and included technical analysis by the authority.
According to the Garante, Facebook requested one permission for the app’s multiple functions, preceded by a generic notice referring to enabling other features. The authority said that arrangement did not clearly tell users they were also authorizing gallery suggestions. It said a fully granted Android permission could give the app access to the entire photo archive, usually on an ongoing basis, without users or the regulator being able to verify what information was actually used.
The regulator ordered Meta, within 60 days, to seek separate and specific consent for the feature, explain its purpose and gallery access, and describe how to turn it off. The feature must be off by default, including for people who had already granted the phone’s system permission. Meta must report within 30 days on steps it has begun and within 90 days on measures it has taken. If Meta misses the compliance deadline, the Garante said the feature cannot be activated for users who have not given valid consent.
Italy vs. Meta · decision of Nov 14, 2026
One permission, a whole gallery, a record fine
How the Facebook app for Android reached users’ photos, according to Italy’s data protection authority, and what Meta must change.
Phone gallery and app (schematic)
Suggestions from your gallerywhile you browse Facebook, available since 2023 Fully granted: the entire photo archive“usually permanently”, the Garante says Within 60 days: off by defaultand a separate, specific consent request
What the Garante found and ordered
- Since 2023“Get tips from your gallery while browsing Facebook” on Androidfeature
- 1 permissionfor the entire app and several functions, after a generic notice (“enable other features”)Garante finding
- On by defaultthe feature “was set to be active by default”Garante finding
- Whole gallerya fully granted permission lets the app read the entire photo archive, usually permanentlyGarante finding
- July 2025Bolzano Consumer Protection Center report; investigation with technical analysisinvestigation
- Nov 14, 2026Fine; within 60 days: separate consent, off by default, also for people who already allowed itdecision (Meta will appeal)
Source: Garante per la protezione dei dati personali, press release doc. web no. 10321080 (Italian with English version), Rome, Nov 14, 2026; Meta’s appeal as reported by Reuters. The full decision was not yet published. The phone and app picture is a schematic, not the real app.
Graphic: Powered by Thorsten Meyer AI
Consent Rules for Phone Galleries
The decision addresses what permission to access photos authorizes when people use apps on their phones. The Garante said broad device-level permission does not by itself establish informed agreement to a particular feature when the app’s explanation is vague and the feature is switched on by default. The ruling is based on Italy’s Privacy Code, which implements the EU ePrivacy Directive.
The Garante said it considered the roughly 20 million Android users in Italy, the duration of the conduct, a 2019 ruling against the company and what it described as limited cooperation during the investigation. It also considered changes Meta made after the complaint, while finding that those changes were late and applied only to people who updated the app. Al Jazeera described the penalty as the largest ever imposed by the Italian regulator; this was the outlet’s characterization, not a finding quoted from the Garante.
The case concerns consent and access to device content; the Garante’s stated findings do not describe a hack or data breach. The decision requires changes to Meta’s consent process and default settings. Meta has said it will appeal.
Products Worth Considering
Logitech MX Master 4 Ergonomic Wireless Mouse with Haptic Feedback, Graphite
Ledger Nano X Bluetooth Crypto Hardware Wallet
Apple MacBook Pro 2026 14.2 Laptop with M5 Pro chip, 15‑core CPU, 16‑core GPU, 24 GB Unified Memory, 1 TB SSD, Wi‑Fi 7 – Silver
As an affiliate, we earn on qualifying purchases.
How the Italian Case Began
The Garante cited Article 122 of Italy’s Privacy Code, saying it protects the smartphone as part of a person’s private sphere. In the authority’s account, access to information stored on a phone requires free and informed consent, regardless of whether information is transmitted or harm is shown. The regulator rejected Meta’s argument that the matter should be handled by Ireland, saying ePrivacy rules do not use the EU’s “one-stop shop” mechanism.
The Garante put the fine at about 0.47% of Meta’s global revenue. For comparison, the same authority fined Facebook €1 million in 2019 in the Cambridge Analytica case, under Italy’s former privacy code. Those penalties arose under different circumstances; the earlier amount is background, not a direct measure of how the current fine was calculated.
The Garante’s press release is dated November 14, 2026. The full decision was not yet available on its website at 21:27 UTC that day, according to the supplied report. The detailed reasoning and any additional terms in the full order therefore could not be checked against the release at that time.
““access to the gallery is requested with a single permission, valid for the entire app and for multiple functions with different need””
— Italy’s data protection authority, in its English-language press release
Appeal and AI Use Remain Open
Meta’s appeal has not been resolved, and the full decision was not available on the Garante website at the last check reported on November 14. The supplied material does not give the appeal filing date, identify the court or set out a timetable for a ruling. The eventual legal effect of the fine and orders may depend on those proceedings.
The regulator’s case did not determine whether gallery content was used to train artificial intelligence. Meta denies using the content for that purpose, according to the source material. A separate gallery-related feature launched in 2026, which processes content in the cloud, may be assessed separately; the available information does not establish that it is part of this decision or what action the Garante may take.
The regulator’s English and Italian press releases also differ slightly in describing who was still affected by the violation. The English version refers to people who had not updated the app; the Italian version additionally mentions people who had already granted system permission. The order to keep the feature off by default for those users is clear in the supplied account, but the full decision is needed to clarify the wording and its application.
Meta’s Deadlines and Appeal
Meta is expected to pursue its stated appeal while responding to the Garante’s orders. The first listed reporting deadline is 30 days for an account of steps begun; the 60-day deadline covers separate consent and a default-off setting; and the 90-day deadline is for reporting measures taken. The source material does not specify the precise date from which each period runs, so the exact calendar deadlines cannot be confirmed here.
The next developments to watch are publication of the full decision, Meta’s appeal and any court action, and the company’s reports to the regulator. Those steps should clarify how the order applies to existing users and whether the authority takes further action over compliance. The available material does not establish a separate decision on AI training or the cloud-processing feature.
Key Questions
Why did Italy fine Meta €805 million?
The Garante said Facebook’s Android photo-suggestion feature accessed photos, videos and related metadata without sufficiently clear information or specific consent. It also cited the feature being on by default and the use of a single permission for multiple app functions.
What must Meta change?
Within 60 days, Meta must request separate, specific consent, explain the feature and its gallery access, and keep it off by default, including for users who had already granted system permission. The company must also report to the Garante within 30 and 90 days on its response.
Has Meta accepted the fine?
No. Meta has said it will appeal. A spokesperson called the penalty “disproportionate,” according to Reuters. The supplied material does not give the appeal’s filing date or outcome.
Did the decision find that Facebook used photos to train AI?
No such finding is described in the decision’s stated scope. The source material says the case did not cover AI training and that Meta denies using gallery content for that purpose. A cloud-processing feature launched in 2026 may be examined separately.
Is the full decision available?
According to the supplied report, the full decision was not on the Garante’s website at 21:27 UTC on November 14, 2026. The regulator’s press release summarized the findings and orders, but the full text could add detail.
Source: ThorstenMeyerAI.com
