Skip to content
Italy fines Meta EUR805m as OpenAI gives agents a wallet artwork

Italy fines Meta EUR805m as OpenAI gives agents a wallet

Marketing Is Calling

November 15, 2026

Italy's privacy regulator fined Meta EUR805 million after finding the Facebook app on Android read photo galleries without valid consent, affecting about 20 million users.

TopicsBusiness NewsNews

SPEAKER_1 (0:00)

This is Marketing Is Calling, the audio edition of Landline, the daily newsletter from PPC Land. It's Sunday, November 15th, 2026 This episode is read by an AI voice. Today, Italy finds Meta 805 million euros over what the Facebook app did with People's Photo Galleries. OpenAI gives its AI agents a wallet without the real card number in it. Amazon quietly redraws a handful of rules for advertisers, and Google wires more of its video ads up to code.

We start in Italy. On Saturday, the country's data protection authority, the Guarante, find Meta 805 million euros. The finding? The Facebook app on Android read photos, videos, and their metadata from people's phones for a feature that suggested things from the gallery. And it did that without specific consent and without properly telling people. About 20 million Android users in Italy were affected. The case started with a complaint from a consumer group in Balzano in July 2025, and it took about 16 months. The regulator said one app-wide permission, a vague notice, and a setting switched on by default just don't add up to real consent. The fixes matter as much as the fine. Meta has to ask for separate consent, keep the feature off by default, even for people who already gave the phone permission, and report back after one, two, and three months. And the guarantee put it in a way that reaches far beyond Facebook. The law, it said, protects the smartphone as part of a person's private sphere. It also refused to pass the case to Ireland, which usually leads on Meta in Europe, because these particular rules have no one-stop shop. The fine works out at about half a percent of Meta's global turnover. Meta's photos got a technical response too. The Brave browser now strips a hidden identifier that Meta writes into images on Facebook and Instagram, a string starting with the letters FBMD. Brave admits Meta has never said what it's for, and it may not be tracking. But the value stayed the same when someone else uploaded the same photo, which could let one image be linked across accounts. Brave's line was simple. This removal makes it harder for Meta to link the same photo across accounts and sites.

The request to fix it sat open on GitHub for more than seven years. Now, OpenAI took a different view of access. On Friday, it launched ChatGPT Wallet. Its agents can now buy things online, but every purchase needs a check, like Face ID or a fingerprint, and then the card network hands over a stand-in credential. OpenAI calls it the first wallet that lets agents pay without access to people's actual card details. It's built with American Express, MasterCard, and Visa, and for now, it's only for US pro-subscribers. The real message might be in the playbook that came with it. OpenAI is telling merchants to make sure agents are not accidentally blocked by their bot defenses.

That's a big ask. One test found bot protection turned away an AI shopping agent at 29 out of 200 retailers. But with ChatGPT claiming 1.2 billion weekly users, a lot of shops may rethink that wall. It's a bit like a bounce of being told the robot is on the guest list.

Agents are moving into the auction too. Lunio, best known for catching invalid clicks, launched a tool with a partner called Revim that cuts Google brand bids when no rival is bidding and puts them back when a competitor shows up. One unnamed food delivery company reclaimed more than $6.4 million in 2025 that way. There was no control group though, and Google's own pricing rules suggest someone bidding alone should already pay close to the minimum.

Over to Amazon, which made four changes in a single day. First, the Amazon ad tag now sets a first-party cookie on advertisers' websites in North America. It links a visitor's page views, signups, and purchases, lasts a month after the last visit, and it's on by default only when consent signals allow it. Turning it off takes a line of code on every page, and the documentation leaves plenty unsaid, including what the identifier actually contains. Second, holiday storefronts. Amazon brand stores will be rejected for using the words Prime Day or any Amazon trademark even inside an image. No urgency language, no specific savings, no superlatives. Promotions only go in one special widget, and since review can take up to three business days, a store sent in two days before Black Friday week starts on November 19, might still be waiting on November 20

Nothing says holiday spirit like a moderation queue. Third, Amazon paused all partner status decisions for agencies through the end of 2026, with new criteria promised before relaunch. And fourth, a help page for its account audit log, the tool that shows which user changed what, simply disappeared between Friday and Saturday. Amazon hasn't said if the tool is gone, moved, or renamed.

Read the other 3 minutes of this episode here.

$15 gets you this episode and 99 more. Credits never expire. After checkout, one link brings you back here to read it.

Not what you expected? Full refund within 14 days.

Thousands of transcripts fetched by people building searchable podcast archives

Fetch transcripts with code

The same credits work from a script or an AI agent. The demo key returns a sample episode in full, no card needed:

request
curl -H "x-api-key: pt_demo" \
  https://spoken.md/transcripts/1000651996090

Markdown with the speakers named, for your notes, your knowledge base, or anything that makes HTTP calls.

From $0.10 per transcript. No subscription. Credits never expire. Prices exclude VAT, added at checkout for EU customers. Not what you expected? Email us within 14 days with 20 or fewer credits used and we refund the pack in full.

Using your own key:

request
curl -H "x-api-key: YOUR_KEY" \
  https://spoken.md/transcripts/1000802044530