Italy’s data protection authority has fined Meta €805 million ($887 million) over Facebook’s access to Android users’ private photos and videos. The regulator found that Facebook accessed gallery files without obtaining specific consent or clearly explaining its data collection practices.
Announced on November 14, 2026, the decision has raised fresh concerns about Meta’s user privacy policies. Italy’s privacy watchdog also ordered Meta to disable the feature by default. The company must obtain separate user consent before accessing private photos and videos.
The investigation found that Facebook could access users’ entire photo libraries through a general app permission. However, users received limited information about the scope of access and how Meta could use their personal media.
What Led to Italy’s $887 Million Fine Against Meta
The €805 million fine against Meta concerns a Facebook feature called “Get suggestions from gallery while browsing Facebook.” Launched in 2023, the feature recommended photos and videos from Android devices for sharing on Facebook.
However, Italy’s data protection authority found that Meta accessed these personal files without obtaining specific user consent. Facebook relied on one general permission that covered several app functions with different purposes.
The regulator also criticized Facebook’s notification for enabling additional features. The message failed to explain that granting permission could give Facebook access to users’ private photo galleries.
Another major concern was that the feature remained enabled by default. After users granted general permission, Facebook could access their entire photo libraries, potentially on an ongoing basis.
Italy’s privacy authority said this practice violated Article 122 of the country’s Privacy Code. The provision protects information stored on smartphones under European ePrivacy rules. It requires companies to obtain users’ free and informed consent before accessing information stored on their devices.
Around 20 Million Android Users in Italy Could Be Affected
The investigation started in July 2025 after Italy’s Consumer Protection Centre of Bolzano filed a complaint. The country’s data protection authority then examined how Facebook accessed photos and videos stored on Android devices.
According to the regulator, approximately 20 million Android users in Italy could have been affected by this practice. Italy’s privacy authority considered several factors before calculating Meta’s €805 million penalty.
These included the number of affected users, the duration of the violation and Meta’s previous regulatory history. The authority also considered a previous decision involving the company in 2019.
The regulator also raised concerns about Meta’s limited cooperation during the investigation. Although Meta introduced changes after the complaint, authorities considered these steps late and insufficient. The €805 million penalty represents approximately 0.47% of Meta’s global revenue.
Meta Must Change Facebook’s Photo Access Settings
Along with the €805 million fine, Italy’s privacy regulator has given Meta 60 days to change Facebook’s gallery access settings.
Meta must introduce a separate consent request for the photo suggestion feature. The company must clearly explain why Facebook needs gallery access and what information it collects. Users must also receive clear instructions on disabling the feature whenever they choose.
Additionally, Meta must keep the feature turned off by default for all users. This requirement also applies to people who previously granted broader permissions through Android.
The regulator has also set deadlines for Meta to report its compliance measures. The company must explain its initial actions within 30 days. It must then submit a report detailing completed changes within 90 days.
If Meta fails to meet these requirements, Facebook cannot activate the feature without valid user consent.
Italy’s Investigation Did Not Examine Meta’s AI Training Practices
Italy’s investigation has raised broader concerns about how technology companies access personal photos and videos stored on smartphones. However, the regulator clarified that its review did not examine whether Meta used this content to train its artificial intelligence models.
According to the authority, Meta denied using users’ photos and videos for AI training purposes. The regulator also indicated that it could separately investigate another Facebook feature introduced in 2026. This feature allows the company to process photos and videos from users’ galleries through cloud services.
A separate investigation could bring further attention to Meta’s data collection practices. It may also examine how the company handles personal photos stored on devices and processed through its services.
ALSO READ: Meta’s Muse AI Phone Calls Involved Human Contractors
Italy’s Fine Raises New Questions About Meta’s Data Privacy
The €805 million fine creates another regulatory challenge for Meta as European authorities increase scrutiny of digital privacy practices. Governments across the region are paying closer attention to how technology companies collect and use personal data.
Meta was not immediately available for comment following the announcement. The company must now address Italy’s regulatory requirements and change Facebook’s gallery access settings for Android users.
The decision also highlights the importance of informed consent when apps request access to personal information. Users should understand what data applications can access before granting permissions. This becomes particularly important when permissions involve sensitive content, including private photos and videos.
For Meta, the case could influence its wider approach to user privacy and personal data collection. Other technology companies may also face greater scrutiny over how their applications access information stored on users’ devices.
