Key Takeaways (TL;DR): Italy fined Meta €805 million for scanning users' Facebook photos without explicit consent. The regulator found that the Android app accessed the device gallery without permission. Meta must disable the default photo-suggestion feature within 60 days. For private and secure internet access, consider a privacy-focused anti-DPI multi-key with a 90 ₽ bonus and free TG proxies for 30 days.

Italy's data protection authority, the Garante, has slapped Meta with a massive €805 million fine after discovering that the Facebook app for Android scanned users' photo galleries without separate consent. The investigation revealed that the app automatically accessed and analyzed images stored on devices to power its "suggestions from gallery" feature, even when users hadn't explicitly agreed to this data processing.

What happened under the hood

According to the regulator, Facebook's Android client used system-level permissions to read the entire photo library. This wasn't just about metadata — the app processed the actual image content to identify people, objects, and scenes. The Garante stated that this practice violated the EU's GDPR, which requires explicit, granular consent for each specific data processing purpose.

The fine and the fix

Meta now has 60 days to disable the photo-suggestion feature by default across all Italian accounts. The €805 million penalty is one of the largest GDPR fines ever issued. Meta has already announced it will appeal, arguing that the feature was always optional and that users could disable it in settings.

Why this matters for users

This case highlights a broader issue: many apps quietly access more data than users realize. Even if you think you've locked down permissions, background processes can still harvest information. The ruling sets a precedent that tech giants must obtain separate, informed consent for each data use case — not just bundle everything into a single blanket agreement.

How to protect your privacy

  • Review app permissions regularly — revoke access to photos, contacts, and location for apps that don't need them.
  • Use privacy-focused browsers and search engines that don't track your activity.
  • Consider a reliable VPN or anti-DPI tool to encrypt your traffic and prevent ISP-level monitoring.

For those who need stable, unrestricted internet access with bypass of white lists and deep packet inspection, the @yavpn_robot offers a private multi-key with a 90 ₽ starting bonus and free TG proxies for 30 days.