Italy levies record €805m fine on Meta for unauthorized photo access

Key points

• The Italian data protection authority, Garante, imposed a €805 million fine on Meta Platforms Ireland Limited.
• The fine relates to the 'Get suggestions from gallery when browsing Facebook' feature, which accessed photos and metadata without specific user consent.
• The feature was enabled by default and used a generic permission request that did not clearly inform users of the specific data access.
• Approximately 20 million Italian Android users were potentially affected by the violation.
• Meta was given 60 days to disable the feature and implement separate consent mechanisms.
• The fine represents approximately 0.47% of Meta’s global turnover.

Background

This fine follows a series of privacy-related actions against Meta, including a $25 billion penalty in New Mexico in September 2026 for deceptive data practices. In October 2026, Meta also faced scrutiny regarding AI photo tools on WhatsApp. The Italian fine is the largest ever issued by Garante, surpassing previous penalties for competition law breaches by other tech giants.

How outlets are covering it

Al Jazeera, CBS News, and AP News all report the fine amount as €805 million ($887 million) and cite the violation of the EU ePrivacy directive. AP News specifically notes that the fine was imposed on Meta Platforms Ireland Limited, which had challenged Italy’s jurisdiction. CBS News contextualizes the fine by comparing it to a 2021 Amazon fine of €1.1 billion, which was later reduced on appeal. All sources agree that Meta has not commented and retains the right to appeal. Al Jazeera and AP News highlight the 'lack of cooperation' by Meta as a factor in the penalty size, while CBS News emphasizes the broader trend of Meta facing privacy-related legal challenges.

Why it matters

The fine underscores the increasing scrutiny of tech companies' data practices under EU and national privacy laws. It signals that regulators are willing to impose substantial penalties for violations of user consent, particularly when features are enabled by default. The case may set a precedent for how other jurisdictions handle similar privacy breaches and could influence Meta’s global compliance strategies.

What to watch

Meta has 60 days to disable the 'Get suggestions from gallery' feature and implement separate consent mechanisms. The company may appeal the fine, potentially leading to further legal proceedings. Regulators in other countries may monitor the case as a benchmark for privacy enforcement.