🔍 Read the full analysis: How Android Photo Gallery Access Became The Focus Of Italy’s Meta Fine on ThorstenMeyerAI.com
Get hardware and tech essentials delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Italy’s data protection authority fined Meta Platforms Ireland €805 million over Facebook’s Android feature that suggests photos and videos from users’ galleries. The regulator said the feature was on by default and that a broad permission and generic notice did not provide specific, informed consent. Meta said it will appeal; the full decision was not yet published when the source checked.
Italy’s data protection authority has fined Meta Platforms Ireland Limited €805 million over a Facebook feature on Android that suggests photos and videos from users’ phone galleries while they browse. The Garante per la protezione dei dati personali said the feature accessed Italian users’ gallery content without specific consent and adequate information, and ordered Meta to change how it requests permission and to keep the feature off by default.
The case concerns Facebook’s “Get tips from your gallery while browsing Facebook” feature, available since 2023. The Garante said the feature presents photos and videos stored on a phone as suggestions for posting. Its investigation began in July 2025 after a report from the Bolzano Consumer Protection Center and included a technical analysis by the authority.
According to the Garante, gallery access was covered by one permission for the app and multiple functions, preceded by a generic notice about enabling other features. The regulator said that setup did not make clear that users were also authorizing gallery suggestions, and that the feature was active by default. It said a fully granted permission could allow the app to read the device’s entire photo archive, usually on an ongoing basis.
The authority ordered Meta, within 60 days, to request separate, specific consent for the feature, explain its purpose and gallery access, and provide information about how to disable it. The feature must remain off by default, including for users who have already granted Android’s system permission. Meta must report within 30 days on steps it has begun and within 90 days on measures taken. Meta said it would appeal; a spokesperson described the fine as “disproportionate,” Reuters reported.
Italy vs. Meta · decision of Nov 14, 2026
One permission, a whole gallery, a record fine
How the Facebook app for Android reached users’ photos, according to Italy’s data protection authority, and what Meta must change.
Phone gallery and app (schematic)
Suggestions from your gallerywhile you browse Facebook, available since 2023 Fully granted: the entire photo archive“usually permanently”, the Garante says Within 60 days: off by defaultand a separate, specific consent request
What the Garante found and ordered
- Since 2023“Get tips from your gallery while browsing Facebook” on Androidfeature
- 1 permissionfor the entire app and several functions, after a generic notice (“enable other features”)Garante finding
- On by defaultthe feature “was set to be active by default”Garante finding
- Whole gallerya fully granted permission lets the app read the entire photo archive, usually permanentlyGarante finding
- July 2025Bolzano Consumer Protection Center report; investigation with technical analysisinvestigation
- Nov 14, 2026Fine; within 60 days: separate consent, off by default, also for people who already allowed itdecision (Meta will appeal)
Source: Garante per la protezione dei dati personali, press release doc. web no. 10321080 (Italian with English version), Rome, Nov 14, 2026; Meta’s appeal as reported by Reuters. The full decision was not yet published. The phone and app picture is a schematic, not the real app.
Graphic: Powered by Thorsten Meyer AI
Why Android Gallery Consent Matters
The ruling addresses a practical question for people using social apps: what exactly does a broad phone permission authorize? The Garante’s position is that permission to access a device feature does not, by itself, amount to informed agreement to every use an app may make of it. It said the Italian Privacy Code requires free and informed consent for access to information on a smartphone, whether or not data is transmitted or a user can show harm.
The fine also comes with changes that could affect how Facebook users encounter the feature. If Meta follows the order, users would need a separate explanation and choice, and gallery suggestions would not turn on automatically, including for people who previously allowed gallery access. The Garante said about 20 million Android users in Italy were involved, a factor it considered when setting the penalty.
This is a regulatory finding, not a finding that Facebook suffered a data breach. The decision concerns the consent and information presented for gallery access. It does not establish that Meta used the photos to train artificial intelligence systems.
Products Worth Considering
Ledger Flex Crypto Wallet with 2.8-Inch E Ink Touchscreen
Ledger Flex + Folio Crypto Hardware Wallet
Ledger Nano X Bluetooth Crypto Hardware Wallet
As an affiliate, we earn on qualifying purchases.
How the Garante Built Its Case
The Garante based its ruling on Article 122 of Italy’s Privacy Code, which implements the EU ePrivacy Directive. It said the rule protects a smartphone as part of a person’s private sphere and requires free, informed consent before information on the device is accessed. Meta argued that the case should have been handled by Ireland’s regulator. The Garante rejected that argument, saying ePrivacy rules do not use the EU’s “one-stop shop” mechanism.
In calculating the penalty, the authority cited the number of people affected, the duration of the conduct, a previous 2019 ruling against Meta and what it called limited cooperation during the investigation. It also credited changes Meta made after the complaint, but described them as late and limited to users who updated the app. The Garante’s announcement is dated November 14, 2026. The full decision was not on its website at 21:27 UTC when the source material said it was checked.
““access to the gallery is requested with a single permission, valid for the entire app and for multiple functions with different need””
— Italy’s data protection authority, in its English-language press release
What the Ruling Does Not Resolve
The Garante’s press release was available, but the full written decision had not been posted when the source material was checked. That means the complete reasoning and any additional detail about the evidence or implementation remain to be reviewed. The source also notes a difference between the Italian and English versions of the release: the Italian text describes the alleged ongoing violation as affecting both people who had not updated the app and those who had already granted system permission; the English text refers only to users who had not updated.
The case did not determine whether gallery material was used to train AI. Meta denies such use, according to the source material, and the regulator’s action did not resolve that issue. A separate feature launched in 2026 that processes gallery content in the cloud may be assessed separately; the source does not establish whether that assessment has begun or what it will cover.
Appeal and Compliance Deadlines
Meta has said it will appeal the fine. The source material does not identify a filing date or say which court or process will hear the challenge. The appeal could test the Garante’s findings and its authority to handle the matter, but no outcome is yet known.
Separately, the Garante’s order sets deadlines for Meta to report its response: an initial account within 30 days and a report on measures taken within 90 days. Within 60 days, the company must put the consent and default-setting changes into effect, according to the order. The full decision and any later statements from Meta or the regulator should provide more detail on how compliance and the appeal proceed.
Key Questions
Why did Italy fine Meta?
The Garante said Facebook’s Android gallery-suggestion feature accessed users’ photos and videos without specific, informed consent and without adequately explaining the use. It said a broad app permission and generic notice were not sufficient.
What must Meta change?
Within 60 days, Meta must request separate, specific consent, explain the feature and how to disable it, and keep it off by default, including for users who previously granted system permission.
Did the case find that Meta used photos to train AI?
No. The ruling described in the source material did not decide whether gallery content was used to train AI. That question remains outside this case; Meta denies such use, according to the source.
Will Meta appeal the €805 million fine?
Yes. Meta said it would appeal, and a spokesperson called the penalty “disproportionate,” Reuters reported. The source material does not give a filing date or an expected decision timeline.
Source: ThorstenMeyerAI.com
