The Italian data protection authority has imposed a hefty fine of 805 million euros on Meta, the parent company of Facebook, for accessing users' photos and videos without their explicit consent. According to reports, the authority found that Facebook had accessed photos and videos of around 20 million users in Italy since 2023 without their permission. This was done through a feature called "Get suggestions from gallery," which proposed photos and videos from users' phone galleries as post ideas.
The feature, available since 2023, used a single authorization that was valid for the entire application, preceded by a generic notice that did not allow users to understand they were also authorizing suggestions from their gallery. The Italian authority criticized Meta for not obtaining specific consent from users before accessing their photos and videos. The fine is one of the largest imposed on a tech company in Italy, representing 0.4% of Meta's annual revenue, which reached 201 billion dollars in 2025.
The Italian authority defended the fine, citing the number of people affected, the duration of the violation, and Meta's limited cooperation during the investigation. The authority ordered Meta to obtain specific consent from users for the feature and to clearly explain its purpose, the access to the gallery, and how to disable it. Meta can still appeal the decision. The company has faced similar criticism in the past, including a 25 billion dollar fine in the US state of New Mexico for allegedly misleading users about data usage.
The fine is a significant blow to Meta, which has faced increased scrutiny over its handling of user data. The company's practices have been criticized for being unclear and misleading, leading to concerns about user privacy. The Italian authority's decision emphasizes the need for tech companies to prioritize transparency and user consent when accessing personal data.
The case highlights the growing importance of data protection regulations in the European Union. The EU's General Data Protection Regulation (GDPR) has given users more control over their personal data and imposed significant fines on companies that fail to comply. The Italian authority's fine is a reminder that tech companies must adhere to these regulations and prioritize user consent.
Meta's fine is also a reflection of the increasing awareness of data privacy issues among users and regulators. The company's practices have been criticized for being invasive and misleading, leading to a loss of trust among users. The Italian authority's decision sends a strong message that tech companies must prioritize user consent and transparency when accessing personal data.
The fine is a significant development in the ongoing debate about data privacy and tech regulation. As users become increasingly aware of the importance of data protection, regulators are taking a closer look at tech companies' practices. The Italian authority's decision is a reminder that tech companies must prioritize user consent and transparency to avoid significant fines and reputational damage.
Key points
- Meta fined 805 million euros for accessing 20 million Facebook users' photos and videos without explicit consent.
- Italian data protection authority criticizes Meta for not obtaining specific consent from users before accessing their photos and videos.
- Meta can still appeal the decision, which represents 0.4% of its annual revenue.
