Italian authority fines Meta Platforms 805 million euros for unauthorized Android media access

The Italian data protection authority fined Meta Platforms 805 million euros for accessing user media without explicit consent. The ruling addresses a feature within the Facebook Android app that accessed photos, videos, and metadata without providing adequate information to users. This unauthorized access has been part of the default settings in the Android Facebook app since 2023.

Scope of the violation

The Italian data protection authority estimated that the unauthorized feature affected approximately 20 million users. The fine amount represents 0.47% of the global group turnover for Meta Platforms. In determining the penalty, the authority cited the high number of affected users and the long duration of the violation as primary factors. The authority also noted that the company provided limited cooperation during the proceedings.

An investigation into the matter began in 2025. While the investigation addressed the unauthorized access to media files, it did not determine whether the accessed content was used to train artificial intelligence models. The authority has reserved the right to launch a separate investigation regarding a different feature. This separate inquiry will focus on cloud-based gallery content processing which was introduced in 2026.

Required corrective actions

Meta Platforms must take specific steps to comply with the ruling issued by the Italian data protection authority. The company is required to disable the unauthorized feature for all currently active users. Additionally, Meta Platforms must update its settings to ensure that users can provide clear consent for media access. The authority has established a deadline of 60 days for the company to complete these adjustments and deactivations.

This regulatory action follows other recent scrutiny regarding the company's data practices and market position. In June 2026, the European Commission ordered Meta Platforms to allow competing general-purpose AI assistants free access to WhatsApp. This specific order from the European Commission remains in effect until an antitrust investigation into the company concludes.

Regulatory context

The decision by the Italian data protection authority highlights ongoing tension between technology companies and European regulators regarding user privacy and data transparency. The investigation into the Facebook Android app focused on the lack of specific consent and the lack of adequate information provided to users before their media was accessed. The scale of the fine, which is equivalent to over 19 billion Czech koruna, reflects the significant impact of the data access on the privacy of millions of individuals.

Glossary

• European Commission — The European Commission is an organization that provides recommendations to the Council of the European Union. It has the authority to issue orders to companies regarding service access.
• WhatsApp — WhatsApp is an American social media, instant messaging, and Voice over IP service accessible via desktop and mobile app. It allows users to send various types of messages, make calls, and share content.