Italy’s data protection authority fined Meta €805 million today.
The case stemmed from a feature launched in 2023: while users browsed their feeds, the Android version of Facebook selected photos and videos from their phone’s gallery and suggested them as material for posts. The regulator found that this step lacked separate authorization, the scope of access was not clearly explained, and photo metadata was also collected. The investigation began with a complaint filed by a consumer organization in July 2025.
Permissions for galleries, contacts, and location have long been enabled by default on mobile devices. Once users tapped “Agree,” all subsequent access was treated as covered by that one-time consent. The regulator’s position is clear: blanket consent does not cover specific data access.
On-chain products face the same issues. The scope of wallet permissions and the boundaries of data access requested by dApps should meet the same standard as gallery permissions. Making permissions less granular saves development costs but accumulates compliance liabilities.
€805 million: the first time this logic has had a price.
#数据隐私 #Regulation
The case stemmed from a feature launched in 2023: while users browsed their feeds, the Android version of Facebook selected photos and videos from their phone’s gallery and suggested them as material for posts. The regulator found that this step lacked separate authorization, the scope of access was not clearly explained, and photo metadata was also collected. The investigation began with a complaint filed by a consumer organization in July 2025.
Permissions for galleries, contacts, and location have long been enabled by default on mobile devices. Once users tapped “Agree,” all subsequent access was treated as covered by that one-time consent. The regulator’s position is clear: blanket consent does not cover specific data access.
On-chain products face the same issues. The scope of wallet permissions and the boundaries of data access requested by dApps should meet the same standard as gallery permissions. Making permissions less granular saves development costs but accumulates compliance liabilities.
€805 million: the first time this logic has had a price.
#数据隐私 #Regulation
