Italy fines Meta €805 million over access to Android users' gallery photos

Tier D · Background noise – Good to know

Who’s exposed: Android users whose gallery photos and videos were accessed by Meta

Tier D because: Does not hit tech teams

Reach

Attack

Damage

Fix

What to do

Review which gallery and photo permissions your Android app requests and whether each is necessary.
Make consent for accessing photos and videos explicit and clearly disclosed to users.

The Brief

Italy's Data Protection Authority fined Meta Platforms €805 million (about $887 million) over access to photos and videos on Android users' galleries.
The regulator alleges Meta accessed the media without users' explicit consent or informing them.
Reuters, Bloomberg and Techmeme all report the decision, announced on Saturday 2026-11-14.

Why it matters

The fine signals that European regulators are scrutinising how apps access local media on Android devices, which matters for any developer whose app requests gallery or photo permissions and relies on consent flows.

The checklist behind the tier

Checklist · 0 of 10 yes

No	Hits tech teams	Judgment: concerns Meta's consumer Android app and user photo access, not developer, ops or IT software.
No	Core infrastructure	Judgment: a regulatory fine over one company's app behavior, not a flaw in infrastructure software.
No	Popular tool	Judgment: Meta's consumer app is not a framework, dev tool or platform developers use.
No	Exploited in the wild	Bloomberg, Techmeme/Reuters: Italian regulator fined Meta over its own access; no attacks reported.
No	Public exploit	Bloomberg, Reuters: no exploit code or proof-of-concept is described; it is a regulatory fine.
No	Remote, no login	Reuters via Techmeme: Meta accessed photos without consent; no unauthenticated remote attack described.
No	Full takeover	Reuters via Techmeme: data access without consent; no code execution or account takeover reported.
No	Secrets exposed	Bloomberg: Meta accessed users' photos and videos without consent; no theft or breach by attackers reported.
No	Supply chain	Bloomberg, Reuters: no compromised package, update, build pipeline or signing key is mentioned.
No	No fix yet	Sources describe a regulatory fine over data practices, not a vulnerability awaiting a patch.

Timeline

Nov 14
Italy's Data Protection Authority announced a €805 million fine against Meta over Android gallery access
Nov 14 · 1:48 PM
Hacker News: Front Page
Italy fines Meta $887M over Android users' data access
Nov 14 · 2:53 PM
Bloomberg Technology
Italy Fines Meta €805 Million Over Access to Users’ Photos
Nov 14 · 3:10 PM
Techmeme
Italy's data protection agency fines Meta €805M for allegedly accessing Android users' photos and videos without their consent or informing them (Reuters)

Full coverage · 3 sources

Techmeme
Italy's data protection agency fines Meta €805M for allegedly accessing Android users' photos and videos without their consent or informing them (Reuters)
3h ago ↗
Bloomberg Technology
Italy Fines Meta €805 Million Over Access to Users’ Photos
3h ago ↗
Hacker News: Front Page
Italy fines Meta $887M over Android users' data access
4h ago ↗

First seen 4h ago · 3 sources · Full story page · How tiers are decided