🔍 Read the full analysis: How Italy’s Meta Fine Connects To Facebook’s Access To Android Photos on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Italy’s data protection authority fined Meta Platforms Ireland €805 million over Facebook’s Android feature that suggests photos from a user’s phone gallery. The regulator says the feature accessed gallery content without specific, informed consent; Meta plans to appeal. The decision does not address whether photos were used to train AI.
Italy’s data protection authority has fined Meta Platforms Ireland €805 million over a Facebook feature on Android that suggests photos and videos from users’ phone galleries, saying the company did not obtain specific consent or properly explain the access. The Garante ordered Meta to change the feature’s consent process and keep it off by default; Meta says it will appeal.
The Garante per la protezione dei dati personali announced the penalty in a press release dated November 14, 2026. The decision concerns Facebook’s “Get tips from your gallery while browsing Facebook” feature, available since 2023. It presents images from a phone gallery as suggestions users may choose to post. The regulator said the feature was active by default and that gallery access was bundled into a permission covering the app and multiple functions.
According to the Garante, a generic notice referring to enabling “other features” came before the permission request and did not make clear that users were authorizing gallery suggestions. The authority said a fully granted permission can allow the app to read the device’s entire photo archive, usually on an ongoing basis, while users and the regulator cannot verify which information is actually used. These are the regulator’s findings; the full decision was not available on its website at 21:27 UTC on November 14, according to the source report.
The order gives Meta 60 days to request separate, specific consent for the feature, explain its purpose and how to disable it, and keep it off by default—even for people who have already granted Android’s system permission. Meta must report within 30 days on steps it has begun and within 90 days on measures taken. The Garante said that if Meta misses the deadline, the feature cannot be activated for users without valid consent.
Italy vs. Meta · decision of Nov 14, 2026
One permission, a whole gallery, a record fine
How the Facebook app for Android reached users’ photos, according to Italy’s data protection authority, and what Meta must change.
Phone gallery and app (schematic)
Suggestions from your gallerywhile you browse Facebook, available since 2023 Fully granted: the entire photo archive“usually permanently”, the Garante says Within 60 days: off by defaultand a separate, specific consent request
What the Garante found and ordered
- Since 2023“Get tips from your gallery while browsing Facebook” on Androidfeature
- 1 permissionfor the entire app and several functions, after a generic notice (“enable other features”)Garante finding
- On by defaultthe feature “was set to be active by default”Garante finding
- Whole gallerya fully granted permission lets the app read the entire photo archive, usually permanentlyGarante finding
- July 2025Bolzano Consumer Protection Center report; investigation with technical analysisinvestigation
- Nov 14, 2026Fine; within 60 days: separate consent, off by default, also for people who already allowed itdecision (Meta will appeal)
Source: Garante per la protezione dei dati personali, press release doc. web no. 10321080 (Italian with English version), Rome, Nov 14, 2026; Meta’s appeal as reported by Reuters. The full decision was not yet published. The phone and app picture is a schematic, not the real app.
Graphic: Powered by Thorsten Meyer AI
Why Gallery Permissions Matter
The case concerns how apps obtain access to personal devices, rather than a reported hack or data leak. The Garante said Italy’s Privacy Code requires free and informed consent for access to information on a smartphone, whether or not data is transmitted or harm is shown. Its reasoning puts emphasis on whether a user understood and agreed to this particular use—not merely whether they accepted a broad operating-system permission.
The authority said around 20 million Android users in Italy were involved. It cited the number of people affected, the duration of the conduct, a prior 2019 ruling against Meta and limited cooperation when setting the fine. It also counted changes Meta made after the complaint in the company’s favour, while describing those changes as late and limited to people who updated the app. The amount is about 0.47% of Meta’s global revenue, according to the source material.
The order may affect the experience of people who use Facebook’s gallery suggestions: the feature must be switched off by default, and turning it on will require a distinct explanation and consent request. More broadly, the ruling makes app permission design and the clarity of in-app prompts a direct enforcement issue. It does not establish that Meta used the gallery contents for any purpose beyond the feature at issue.
Popular right now

Bose QuietComfort Wireless Noise-Cancelling Over-Ear Headphones, Cypress Green

Vitamix VX1 Professional-Grade Blender, 64 oz, Black

Dyson V15 Detect Cordless Vacuum
As an affiliate, we earn on qualifying purchases.
How the Garante Reached Its Decision
The investigation began in July 2025 after a report from the Bolzano Consumer Protection Center, according to the Garante. The authority said its case also relied on its own technical analysis. It applied Article 122 of Italy’s Privacy Code, which implements the EU ePrivacy Directive, and said those rules protect a smartphone as part of a person’s private sphere.
Meta argued that Italy was not the proper regulator and that the matter belonged with Ireland’s authority. The Garante rejected that argument, saying the ePrivacy rules do not use the GDPR’s “one-stop shop” mechanism. The authority also referred to a 2019 ruling against Facebook when explaining the penalty. That earlier Italian fine was €1 million and concerned the Cambridge Analytica case under the country’s former privacy code.
The Garante’s press release is available in Italian and English. The source report noted a difference between the versions describing whether the violation was ongoing: the Italian text also refers to people who had already granted the system permission. The order’s requirement to keep the feature off by default for those users is consistent with that additional wording.
“The feature “was set to be active by default.””
— Italy’s data protection authority, in its English-language press release
AI Use and Appeal Remain Open
The Garante’s case, as described in its announcement, does not determine whether images accessed through the feature were used to train artificial-intelligence systems. Meta denies that gallery content was used for AI training, according to the source report. A separate feature launched in 2026 that processes gallery content in the cloud may be examined separately; the available material does not establish that it is part of this decision.
Meta says it will appeal, but the source material does not specify when it will file or which findings it will challenge. The full decision was not posted on the Garante’s website at 21:27 UTC on November 14, so the press release does not provide all the legal and technical detail behind the order. The authority’s findings should therefore be distinguished from any issues that may be contested in an appeal.
Meta’s Compliance Deadlines
Meta must submit its first report to the Garante within 30 days, covering measures it has started, and a further report within 90 days describing what it has done. Within 60 days, it must introduce a separate consent request, explain gallery access and controls, and set the feature to off by default, including for people who previously granted the Android permission.
The next developments are Meta’s appeal and the regulator’s review of the company’s reported compliance. The full decision could clarify the technical evidence, the regulator’s calculation of the penalty and the exact reach of the orders. Any separate assessment of the 2026 cloud-processing feature would be distinct from the decision announced on November 14.
Key Questions
What did Italy fine Meta for?
The Garante fined Meta Platforms Ireland €805 million over Facebook’s Android feature that suggests photos and videos from a phone gallery. It said the feature lacked a clear, specific consent process and was on by default.
What changes did the regulator order?
Within 60 days, Meta must ask separately for consent, explain the gallery access and how to disable it, and keep the feature off by default—even for people who already granted Android’s system permission.
Did the ruling find that Meta used photos to train AI?
No. The case described in the regulator’s announcement did not decide whether gallery content was used for AI training. Meta denies such use, according to the source report.
Will Meta challenge the fine?
Yes. Meta said it will appeal. A spokesperson described the penalty as “disproportionate,” according to Reuters.
How many users were covered by the case?
The Garante cited around 20 million Android users in Italy when explaining how it set the fine. That figure is the regulator’s stated estimate of the number involved.
Source: ThorstenMeyerAI.com
