Meta faces a record fine for violating user privacy laws.
The Italian Data Protection Authority, also known as Garante, has fined Meta €805 million ($887 million) for accessing the photos and videos of Android users without proper consent.
The regulator found that a Facebook feature suggesting gallery content for posts was enabled by default and used a generic authorization process rather than obtaining specific, informed consent. This action affected approximately 20 million users.
The fine was based on the 'Get suggestions from gallery when browsing Facebook' feature being enabled by default.
ABC NewsThe regulator cited Meta's lack of cooperation and a previous 2019 violation as reasons for the fine.
Al JazeeraMeta was fined $887 million by Italy for violating privacy laws by accessing Android gallery content without informed consent.
Italy's Data Protection Authority fined Meta €805 million for accessing Android users' photos without specific consent.
Italy's data privacy regulator fined Meta $880 million for accessing Android users' photos without proper consent and for failing to cooperate with the authority.
The cost of treating specific consent as a generic formality
The core of this dispute is whether a single, app-wide authorization is sufficient to access a user's private gallery. The regulator determined that enabling a suggestion feature by default bypassed the requirement for informed and specific consent. This approach turned a targeted permission into a generic one, affecting roughly 20 million users.
Meta challenged the jurisdiction of the Italian authority over this matter. The final penalty reflects not only the scale of the data access but also the company's lack of cooperation during the proceedings. The company now faces a deadline to dismantle the default setting and implement a separate request process for gallery access.
Focusing on the fine while missing the technical nuance
The coverage across ABC News, BBC, and Al Jazeera is largely uniform, focusing on the record-breaking fine and the failure to obtain consent. All three outlets correctly identify the default-enabled feature as the primary violation.
Al Jazeera provides the most useful context by clarifying that these proceedings did not cover AI training, preventing the reader from conflating this specific gallery access issue with broader debates over generative AI data scraping. While BBC attempts to establish a pattern of behavior by mentioning a separate US legal penalty, the reporting generally treats the event as a straightforward regulatory slap on the wrist rather than analyzing the structural tension between user convenience and data sovereignty.
Loading comments...