But if you say "We need to access your photos so you can share a few with your friends" and then proceed to upload all the photo's, you are in violation.
Which is similar to what happened here and what the Italian judge ruled to be illegal.
> Which is similar to what happened here
In fact, it has nothing to do with what happened here; why lie? No photos were uploaded by the feature the fine was assessed for.
Facebook requested access to users' photo galleries through a single app-wide authorisation. According to the Italian regulator, a preceding notice did not make clear that this would also allow Facebook to generate suggestions based on photos in their gallery.
https://www.bbc.com/news/articles/cwn83gxemk35o
They should have explicitly asked separate consent to generate suggestions based on photos.
They know this. They just made the judgement that they could get away with an 'oopsie' or a fine that is just doing cost of business. These >1B fines are good, make them feel it, so that the next time they won't violate the GDPR.
I mean, this is kind of nuts. Should they ask consent every time you click to navigate to a new page, just in case you didn't want to see it? What level of granularity is acceptable?
I think your comment is obtuse and that you did not actually try to understand what the GDPR is saying but anyway: no, it doesn't concern itself about that dimension at all. There would on the other hand need to be new informed consent from the user before their data can be shared with new parties or used/transmitted/processed/stored for new purposes or extended time/space scopes.
They use dark patterns and deception, and without knowing the details here I suspect Meta is guilty.
Meta’s response even stinks of these dark patterns, glossing over informed consent.
Suffice to say, Nokia is on my blacklist of companies to never patronize again.
TL;DR: they didn't thoroughly explain the users what they were consenting to when giving the app access to the gallery.
* either share from an outside app, e.g. the gallery, choose "share", choose "whatsapp". This gives it access only to the photo you shared from the other app.
* and in Android's settings you can give Whatsapp access to a subset of photos, then it works normally on only that subset. Then you can always add more from outside that set, by pressing the paperclip icon when you write the message, there you see the "gallery option", then you see the limited subset of photos you gave access to, at the bottom right you have a folder picker icon which opens the system's gallery picker view (google photos in my case), where you can see all photos, and it can then access that photo too.
* if you chose no access to media at all, but if whatsapp has camera access, click on the paperclip icon in the message box, then, "camera", then the "gallery" icon, there you get a screen prompting for gallery access, but on the bottom right it has the same folder icon that gives access to the system photo picker, which again will only allow access to the photo you pick there.
The first two cases are pretty low-friction.
Works for me on an alternate Android OS without photos permission, but it's buggy (possibly on purpose) and often requires doing the sharing intent action twice.
WhatsApp only has "Network", "Notifications" and "Sensors" permission on my phone
https://www.politico.eu/article/italy-hits-meta-with-e805m-f...
Yes? Just because I want to share some pictures through an app doesn't mean I want it to go and do anything it wants with any picture on the device.