Italy Fines Meta Over Photo Privacy Violations

Italian regulatory authorities have issued a record-breaking financial penalty against Meta, ordering the tech giant to pay 805 million euros, which equates to roughly 887 million US dollars. The penalty stems from allegations that the company accessed smartphone users' personal photos and associated metadata without obtaining explicit permission or properly informing them. This enforcement action highlights ongoing scrutiny regarding user privacy and corporate data practices in Europe, a topic many users investigate when looking up information about Italy Meta.

According to the Italian data privacy authority, known as Garante, the issue centers around a specific feature on the Facebook application for Android devices. This function suggests pictures and videos from a user's phone gallery while they browse the platform. Regulators stated that this feature breached national legislation implementing the European Union privacy directive. Furthermore, the agency noted that the mechanism for gathering user agreement was overly broad, failing to give individuals a clear understanding of the permissions granted. The photo suggestion setting was also activated automatically by default for users.

The levied financial penalty represents the largest monetary sanction ever issued by the Italian regulator, amounting to approximately 0.47 percent of Meta's total worldwide turnover. In its decision, the authority pointed out a lack of cooperation from the company during the proceedings and noted that a previous regulatory violation from 2019 also influenced the final amount. Approximately 20 million Android users in Italy may have been affected by the default setting issue.

Italian regulators penalize Meta heavily for accessing user photos without proper consent.

Required Changes and Scope

Under the regulator's directives, Meta is required to modify the unclear consent notification system and ensure the feature is no longer enabled automatically. The current proceedings did not examine whether user content was utilized for training artificial intelligence systems, an activity that Meta explicitly denies. The company has not yet issued a public statement addressing the penalty and retains the legal right to challenge the decision in court.

Why it matters

This regulatory action establishes a significant precedent for how tech platforms handle automatic data access on mobile devices in Europe. By targeting default consent mechanisms and demanding greater transparency, the decision affects millions of smartphone users and signals stricter enforcement of digital privacy laws across the region.