In a significant regulatory move, Italy has levied an €805 million ($887 million) fine on Meta for breaches related to user privacy. The penalty was announced on Saturday, targeting Meta’s practice of utilizing photos and videos from Android users’ galleries on Facebook without obtaining explicit consent or providing sufficient disclosure.
Violation of European Privacy Laws
The Italian Data Protection Authority highlighted that the feature in question, named “Get suggestions from gallery when browsing Facebook,” contravened a European privacy directive. This directive, integrated into Italian legislation, mandates “free and informed consent” for accessing users’ private data on smartphones, which are considered an integral part of personal privacy.
Investigations revealed that the feature was automatically enabled, and Facebook grouped gallery access requests with other app permissions, which served varied purposes. This lack of transparency prompted the authority to take action.
Mandatory Changes for Meta
As a result of its findings, the authority has given Meta a 60-day deadline to deactivate the feature and obtain separate, explicit consent from Android users in Italy. The country is home to approximately 20 million Android users, emphasizing the scope of the directive’s impact.
Meta Platforms Ireland Limited, the entity fined, has contested Italy’s jurisdiction over the matter, although no immediate public statement was issued by the company in response to the fine.
Implications of the Penalty
The penalty represents about 0.47% of Meta’s global revenue, a reflection of the company’s “lack of cooperation” during the investigation, according to the authority. Such a fine underscores the growing scrutiny on tech companies regarding data privacy and the enforcement of stricter regulations.
As regulatory bodies increase their vigilance, companies like Meta are likely to face more challenges in aligning their practices with privacy laws, impacting their operations and user trust globally.
The outcome of this case might set a precedent for future privacy-related disputes, emphasizing the critical need for transparent and user-friendly data consent practices.
