Question of the Day
One question per day to look beyond the headlines.
Where does a “photo suggestions” feature cross from convenience into unlawful device-level data access?
Take-away “Convenience” becomes unlawful when device photo access is bundled into broad, default-on permissions; regulators require a separate, specific opt‑in gate per data type.
A "photo suggestions" feature crosses from convenience into unlawful device-level data access when it accesses personal user data without clear and specific user consent. In the case of Meta's photo suggestion feature on Android devices, Italy's data protection authority fined Meta €805 million because the feature accessed users' photos, videos, and metadata without obtaining explicit user consent and was enabled by default, violating privacy regulations [1]. The authority found the consent given by users was too general and inadequate, necessitating more explicit consent procedures. Meta was required to seek separate consent and disable the feature by default [1].
This situation exemplifies how a feature can become unlawful when user data access isn't transparently communicated or controlled in a user-friendly manner, breaching privacy standards.