Meta Fined €805 Million in Italy for Unauthorized Gallery Access 2026

Meta has been hit with an €805 million fine by Italy's data protection authority, the Garante per la Protezione dei Dati Personali, for accessing Android users' photos and videos without specific consent. The penalty, one of the largest in the regulator's history, stems from a feature that suggests photos from your gallery to post on Facebook.

What Exactly Happened?

Since 2023, Facebook's Android app has included a feature that, while you browse, proposes photos and videos from your phone's gallery as post ideas. According to the Garante, the app requested a single generic authorization that covered the entire app and multiple functions with different needs, making it unclear what exactly you were consenting to.

Moreover, the feature was enabled by default. The investigation began in July 2025 following a complaint from the Centro di Tutela dei Consumatori e degli Utenti di Bolzano (a consumer protection center in Bolzano) and relied on a technical analysis by the authority itself.

Why This Matters for Your Privacy

Meta argues that users grant permission on their phone and can revoke it at any time. But the Garante disagrees. According to the Italian agency, such a permission leaves users in the dark about how their data is being used.

This case highlights a growing tension between convenience features and privacy rights. When apps access your gallery, they can see much more than just the photos you want to share—they can view metadata, locations, and timestamps, which can reveal sensitive information.

The fine also underscores the importance of informed consent. Regulators are increasingly scrutinizing whether companies obtain clear, specific permission for each data use, rather than bundling everything into one vague agreement.

Key Takeaways from the Meta Fine

• €805 million penalty: One of the largest privacy fines in Italy's history.
• Feature enabled by default: Users were not given a clear choice to opt in.
• Generic consent: A single authorization covered multiple functions, obscuring what was being approved.
• Android-only: The issue specifically affects Facebook's Android app.
• Investigation triggered by consumer complaint: A local consumer group in Bolzano raised the alarm.

How Does This Compare to Other Privacy Fines?

Meta has faced numerous privacy penalties in Europe under the GDPR. This fine is among the highest, reflecting the severity of the violation. Here's a quick comparison:

As you can see, Meta's fine is significant but not unprecedented. However, it sends a clear message that regulators are watching how companies handle user data, especially when it comes to features that seem innocuous. The background to this story is set out in NHS Data Breach: 10 Suspended Over Noah Woods Privacy Violation. A related thread runs through Meta Hit With $25 Billion Fine Over Privacy Scandal. Earlier coverage in Declutter Your Digital Life: Protect Data From AI and Boost Privacy shows how the argument developed.

What Should You Do to Protect Your Data?

If you're concerned about apps accessing your gallery, here are a few steps you can take: A closer look at the same subject appears in UK AI Security: Ukraine Battlefield Data to Protect Sites. Anyone following the wider picture can start with Protect NHS Patient Data: Secure Records with Open Standards. The same theme surfaces in Zaragoza Flood Plan: Amazon's $15M Tech to Protect Data Centers, which takes a different angle.

• Review app permissions: Go to your phone's settings and check which apps have access to your photos and videos. Revoke access for apps that don't need it.
• Be cautious with default settings: When installing or updating apps, pay attention to pre-checked boxes and default permissions.
• Use privacy-focused alternatives: Consider using apps that prioritize privacy or offer granular permission controls.
• Stay informed: Follow privacy news and updates to know your rights and how to exercise them.

Remember, your data is valuable, and companies should be transparent about how they use it. If something feels off, don't hesitate to question it. Context on how this played out before sits in Protect NHS Patient Data: 5 Steps for Secure Records. A companion piece, Protect NHS Patient Data: 5 Key Steps for Secure Records, approaches the same subject from another angle.

FAQ