Italian Regulator Fines Meta 805 Million Euros Over Android Photo Access Violations

The Italian Data Protection Authority fined Meta 805 million euros on Saturday, November 14, 2026, for accessing Android users' photos and videos without specific consent. The sanction relates to a feature within the Facebook Android app known as "Get gallery suggestions while browsing Facebook," which has been active since 2023. The regulator found that the app used a generic "enable other functions" permission to access device galleries. This feature was enabled by default and failed to clearly inform users that it allowed access to photos and videos for the purpose of post suggestions.

Investigation and Regulatory Findings

The investigation into the matter began in July 2025 and was triggered by a complaint from the Bolzano Consumer and User Protection Center. According to officials, the violation affected approximately 20 million Android users in Italy. The ruling cited a violation of Article 122 of the Italian Privacy Code regarding electronic communications. In its decision, the regulator rejected an argument from Meta suggesting that the Irish authority should have had jurisdiction over the case.

The fine, which is valued at approximately US$ 887 million or US$ 900 million, represents between 0.47% and 0.5% of Meta's global revenue. While the investigation focused on the gallery suggestion feature, it did not include an analysis of whether images were used to train AI models, a claim that Meta has denied. However, the regulator may separately evaluate a different feature launched in 2026 that processes gallery content in the cloud.

Required Compliance and Next Steps

Meta faces several strict deadlines to comply with the ruling. The company must deactivate the feature by default within 60 days. Furthermore, Meta is required to request specific, independent consent for the feature and must clearly explain its implications to users. The company is also required to report its initial measures within 30 days and its implemented measures within 90 days.

This significant penalty follows other regulatory actions against the company. For example, a US-based report noted that Meta received a US$ 25 million fine in New Mexico, USA, in October 2025. Meta did not immediately respond to requests for comment regarding the Italian ruling.