Italy hits Meta with €805m fine over privacy law violation
Italian authorities have fined Meta €805 million for violating privacy laws by requesting blanket access to users' camera rolls without proper consent.
The investigation, launched in 2025, established that Meta's app requested access to a user's camera roll with a single permission covering multiple features with different privacy needs. The authorization was preceded by a generic warning that didn't inform users they were allowing picture and video suggestions.
If granted in full, this type of permission allows the app to read the device's entire photo archive, usually permanently, without the user or the authorities being able to verify which information is actually being used.
Jurisdiction Dispute
The authority rejected Meta's objection that the Irish authority should handle the case, stating that the ePrivacy regulation doesn't provide for a 'one-stop-shop' mechanism in this instance.
Required Actions
Meta has 60 days to obtain separate and specific consent for the feature, clearly explain its functionality and how to disable it, and ensure the feature is disabled by default, including for users who have already authorized it.
Meta didn't immediately respond to a request for comment and has the right to appeal the decision.
Related
