Italy Fines Meta $887 Million Over Android Photo Access
The penalty targets access to users' stored photos and videos without consent, a concluded finding on data-collection practices.
Updated on Nov. 14, 2026 in Cybersecurity
Live Poll
Do you trust Meta to respect your privacy on your phone?
Italy's data protection agency fined Meta Platforms $887 million for accessing photos and videos stored by Android users without their consent or notice. Separately, a New Mexico court ordered Meta to pay $25 billion after a jury found it misled residents about data collection and protection. Both matters are concluded decisions, and the practices described are established findings, not announced products.
Why it matters
The two penalties point to regulators and courts treating on-device data access as a consent problem, not just a security one. Enforcement is coming from consumer-protection and data-protection law at the same time, which raises the cost of collecting data first and disclosing later.
The Italian fine is a regulatory finding on the amount of penalty imposed, and the New Mexico figure is a court-ordered penalty following a jury verdict of more than 43 million violations of the state's Unfair Practices Act. The extraction does not provide the technical details of how the access was performed or any comparison to prior penalties.
The players
Meta Platforms
Meta Platforms operates Facebook, Instagram, WhatsApp and the Android-based Meta Quest ecosystem, and is one of the largest advertising-funded platforms in the world.
The details
Android phones store photos and videos on the device, and apps that request access can read them. Italy's regulator found that Meta accessed these files without seeking users' consent or informing them that it was doing so. In New Mexico, a jury found Meta liable for misleading residents about how their data was collected and protected, counting more than 43 million separate violations of the state's Unfair Practices Act, and the court then set the $25 billion penalty.
Timeline
Italy's data protection agency fine against Meta was reported on Saturday, 14 November 2026.
The New Mexico court penalty was ordered after the jury verdict on the state's Unfair Practices Act claims.
The Tech Race
Regulators in Europe and US states are now penalizing platforms for how they gather data, not only for breaches that expose it. The sizes of these penalties, from Italy's $887 million to New Mexico's $25 billion, show enforcement moving toward the scale of the companies' own revenues.
Users of Android phones should check which apps have access to photos and videos in their permission settings. The extraction does not state that Meta has changed how it handles these files or what steps affected users can take to get refunds or remedies.
The takeaway
Watch whether Meta appeals the Italian fine and whether it changes how its Android apps request access to stored photos and videos. Regulators in other EU countries may open similar inquiries based on the same consent rules.
Further reading
For context on how data-protection enforcement is shaping security practice, see our Cybersecurity coverage.
Live Poll
Do you trust Meta to respect your privacy on your phone?
