Italy's Data Protection Authority has imposed a hefty €805 million ($887 million) fine on Meta, the parent company of Facebook, for improperly accessing Android users' photos and videos without their explicit consent. The regulator announced on Wednesday that the social media giant had failed to adequately inform approximately 20 million smartphone users in Italy that it was accessing their media files through a Facebook app feature.
Feature Under Scrutiny
The feature in question suggests photos and videos from a user's phone gallery as ideas for posts. According to the authority, Facebook requested access to users' photo galleries through a single app-wide authorization. However, the notice provided to users did not make it clear that this permission would also allow Facebook to generate suggestions based on photos stored in their gallery.
The regulator has given Meta 60 days to disable the feature by default and to seek users' consent separately. This means that users must explicitly opt in for the feature to access their media files.
Largest Fine Imposed
The fine is among the largest ever imposed by an Italian authority on a tech company. In determining the penalty, the regulator took into account the high number of people affected and the fact that the violation is still ongoing for those who have not updated the app and for those who have already given their consent to the system. It also cited Meta's lack of cooperation during the investigation.
Meta, which also owns Instagram and WhatsApp, has not yet commented on the fine. The BBC has reached out to the company for a statement.
Meta's Recent Troubles
This penalty comes on the heels of another major fine for Meta. Last month, a US judge in New Mexico ordered the company to pay $25 billion after finding that it had spent years lying to the public about how it handled Facebook user data. That fine was the largest ever imposed on Meta for its business practices.
The Italian fine underscores the growing scrutiny that tech giants face over privacy issues in Europe. The European Union has been at the forefront of regulating data protection, with the General Data Protection Regulation (GDPR) setting strict rules on how companies can collect and use personal data. Meta has previously faced fines under GDPR, but this latest penalty from Italy's Data Protection Authority signals that national regulators are willing to take tough action.
What This Means for Users
For users, the decision means that Meta must change how it obtains consent for accessing photos and videos. The feature that suggests photos for posts will be turned off by default, and users will need to give explicit permission for it to be enabled. This gives users more control over their personal data and ensures that they are fully informed about how their information is being used.
The fine also serves as a warning to other tech companies that they must be transparent about their data practices and obtain proper consent from users. As regulators continue to crack down on privacy violations, companies that fail to comply with the rules can expect significant penalties.
Meta has faced numerous privacy controversies in recent years, from the Cambridge Analytica scandal to issues with data sharing. This latest fine adds to the company's growing list of regulatory challenges. It remains to be seen how Meta will respond to the Italian authority's decision and whether it will appeal the fine.
