Skip to content

Article 130 GDPR — enforcement

Cited in 16 decisions · €9.5M total fines · median €65,000 · top authority: 🇪🇺Italian Data Protection Authority (Garante) (16)

Date ↓ Company / party Authority Articles Fine
2024-09-12 Sky Italia S.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 130 €842,062
2024-06-20 Fastweb S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €1,000,000
2024-06-06 Eni Plenitude S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 24Art. 25 €6,419,631
2024-05-09 Azzurro Club Hotels S.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 6Art. 12Art. 15Art. 130 €10,000
2024-02-22 Azienda Trasporto Passeggeri Emilia-Romagna S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €50,000
2023-11-30 Limit Call S.r.l.s.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €60,000
2023-10-12 Scionti Selezioni Superiori S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €70,000
2023-07-18 Tiscali Italia SpA
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 24 €100,000
2023-07-18 Università Telematica E-Campus
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €75,000
2023-07-18 Compara Facile S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €40,000
2023-03-09 Aesse S.r.l.s.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €3,000
2023-03-02 Private individual
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 130 €5,000
2023-02-23 Ediscom S.p.a.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 14 €300,000
2022-11-10 Vodafone Italia S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €500,000
2022-04-07 Made in Italy s.r.l.s.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 6Art. 7Art. 15Art. 17 €20,000
2021-12-16 Enel Energia S.p.A
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 13 €0