Italy Fines Meta $887 Million Over Android Media Access

Italy's data protection authority has fined Meta Platforms €805 million, or approximately $887 million, after ruling that the social media giant improperly accessed personal media files on Android devices. The landmark regulatory sanction targets a Facebook mobile feature that systematically retrieved private photos and videos without securing valid, informed consent from individuals.

The investigation by the Italian privacy watchdog, the Garante, focused on a specific gallery integration active since 2023 under the title "Get suggestions from your gallery when you browse Facebook." Investigators found that the application deployed overly broad permission prompts, enabling continuous background access to device storage rather than establishing granular, specific authorizations for file handling.

Regulators determined that approximately 20 million Android smartphone users throughout Italy were affected by the automatic collection mechanism. According to the regulator's findings, personal photographs, video recordings, and associated image metadata were accessed on a routine basis whenever users engaged with the Facebook platform.

In addition to the monetary penalty, the authority issued an injunction requiring Meta to overhaul the feature's architecture within 60 days. Under the ruling, Meta must turn off the tool by default and implement distinct, active prompts requiring users to explicitly opt in before the platform can read any local device galleries.

Meta strongly contested the decision, characterizing the multi-million-dollar fine as disproportionate and announcing plans to challenge the ruling in court. A company spokesperson argued that the feature was created to provide a user-friendly way for people to share media, asserting that device-level permissions remain under the direct control of smartphone owners.

The privacy watchdog noted that the current enforcement action did not cover the potential use of local media for training artificial intelligence models, a practice Meta denied engaging in through this feature. However, the Italian agency stated it reserved the right to review a newer cloud-processing capability deployed by Meta to assess whether separate data protection issues exist.

The sanction reflects intensified enforcement across the European Union under strict privacy standards that require consent to be explicit, freely given, and transparent. Regulators have consistently targeted digital platforms that rely on default settings or broad permission dialogs to unlock access to sensitive user data stored on personal hardware.

Legal and technology experts emphasize that the Italian decision reinforces regulatory skepticism toward bundled app permissions. As mobile software ecosystems become more integrated with device sensors and local storage, authorities are pushing tech companies to decouple basic app functionality from deep file-system access.

The proceedings now transition to the judicial system as Meta initiates its legal appeal against the Italian privacy watchdog's administrative order. The outcome of the litigation is anticipated to set significant benchmarks across Europe for mobile software permissions and the legal boundaries governing automated file access.