Italy levies $880 million fine on Meta over access to users’ photos

Italy has fined Meta $880 million after concluding the company accessed users’ photos without the “specific” consent required by the country’s data protection framework, according to a report citing the Italian regulator’s decision.

The case centers on consent, a concept at the heart of the European Union’s privacy regime. Under EU-style rules, consent is expected to be informed, freely given, and tied to a specific purpose. The Italian authority’s finding indicates it believed Meta’s permission for photo access did not meet that standard.

The fine highlights how regulators are scrutinizing not only what platforms collect, but also the legal basis they rely on for accessing user content. For social networks and messaging apps, photos are both highly sensitive personal data and a core input into product features, including feeds, discovery tools, and internal safety and quality processes.

Meta, which runs Facebook and Instagram among other services, has long faced regulatory scrutiny across Europe over how it handles user data and how it explains those practices. While the Italian decision is separate from other enforcement actions, the underlying theme is consistent: courts and regulators continue to test whether consent flows and privacy notices are detailed enough to satisfy specific legal requirements.

The $880 million figure is large enough to be material not only for compliance budgets but also for broader product and policy design. When authorities impose significant penalties, companies often respond by revising consent wording, changing how users are prompted, and tightening internal controls around data access and retention to reduce the risk of repeat findings.