Regulatory Action and Scope of the Fine
Italy’s Data Protection Authority announced a penalty of €805 million, equivalent to approximately $887 million, against social media giant Meta Platforms, as reported by the BBC on November 14, 2026. The regulatory enforcement targets how the Facebook app handled personal media galleries on Android operating systems. According to the authority’s findings, approximately 20 million smartphone users in Italy were affected by a feature that accessed personal photographs and videos without explicit or properly informed consent. The financial penalty represents roughly 0.47% of the technology conglomerate’s total global revenue, positioning it as one of the largest regulatory fines ever issued by an Italian authority against a major tech corporation.
The Mechanics of the Facebook App Feature
The enforcement action centers on a specific functionality within the Facebook application designed to suggest photos and videos from a user’s personal device gallery as ideas for posts. Italian regulators stated that Meta requested access to these private media files through a single, app-wide authorization prompt. However, the preceding notification failed to clarify to users that this initial permission would simultaneously allow Facebook to analyze and generate post suggestions based on the contents of their device gallery. The investigation, which originally commenced in 2025, established that the practice remained ongoing for individuals who had not updated their application or who had previously granted system-level permissions without realizing the full scope of data processing.
Regulatory Demands and Compliance Deadlines
As part of the enforcement order, the Italian data protection agency has given Meta a strict window of 60 days to disable the contested feature by default. Furthermore, the company is required to establish a separate, transparent mechanism to seek explicit user consent before accessing personal media libraries in the future. While the core investigation concluded that the practice did not extend to training artificial intelligence models—an allegation explicitly denied by Meta—regulators noted that they reserved the right to assess a separate, newly launched 20th-century feature that processes gallery content directly in the cloud. The Italian authority also cited what it characterized as Meta’s lack of cooperation throughout the lengthy investigative process.
Corporate Response and Broader Legal Pressures
In response to the ruling, a Meta spokesperson told the BBC that the corporation strongly disagrees with the regulator’s assessment of the facts, its legal application, and the disproportionate scale of the financial penalty. The company defended the functionality as a straightforward tool intended to assist users in sharing media on Facebook, emphasizing that individuals must manually grant device-level permissions and retain the ability to modify those settings at any time. This domestic penalty arrives shortly after another major legal setback for the tech giant; last month, a federal judge in New Mexico ordered Meta to pay $25 billion following findings that it misled the public regarding its handling of user data.