Italy hits Meta with €805m fine over privacy law violation
Regulator cites lack of specific user consent for camera roll suggestions feature on Android devices
Quick Look
- Italian regulators have fined Meta €805 million for accessing Android camera rolls without specific user consent.
- The authority ruled the 'camera roll suggestions' feature violates ePrivacy laws and ordered Meta to implement separate, explicit opt-in protocols.
AI-generated summary
Why It Matters
The investigation began in 2025 regarding how Meta's Facebook app accesses user camera rolls on Android devices.
Italian authorities fined Facebook’s parent company Meta €805 million for using photos and videos from Android phones without users' specific consent, the Italian Data Protection Authority said in a statement Saturday.
The fine concerned the "camera roll suggestions when browsing Facebook" feature, which suggests photos and videos from a phone's gallery for users to add to posts.
The feature violates the Italian law implementing the EU's ePrivacy directive, the authority said. It is by far the largest fine ever imposed by the Italian regulator.
The investigation, launched in 2025, established that access to a user's camera roll is requested with a single permission for the entire app, which the authority said covers multiple features with different needs. The authorization request was preceded by a generic warning that didn't allow users to understand that they were authorizing picture and video suggestions, the authority said.
"If granted in full, this type of permission allows the app to read the device's entire photo archive, usually permanently, without the user or the authorities being able to verify which information is actually being used,” the statement reads.
The authority also said it "rejected the objection of lack of jurisdiction raised by the company in favor of the Irish authority, because the ePrivacy regulation does not provide for the 'one-stop-shop' mechanism."
Meta has 60 days to get consent separately and specifically for the feature, clearly explain what it does and how it can be disabled, the authority said. It also must be disabled by default, including for those who have already authorized it.
Meta didn’t immediately respond to a request for comment. It has the right to appeal the decision.
What to Watch
AI outlook — possibilities, not facts
Meta will file an appeal against the Italian Data Protection Authority's decision.
Likely · Within weeks
Open Questions
- Will Meta appeal the decision?
- How will the changes affect user engagement metrics?
