🇮🇹 Italian Data Protection Authority (Garante)

663 decisions · €259.5M total fines · Italy →

Date ↓	Company / party	Authority	Articles	Fine
2026-09-03	Banco Bilbao Vizcaya Argentaria S.A. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 21 Art. 24	€5,508,000
2026-09-03	Friuli Centrale University Health Authority Insufficient technical and organisational measures to ensure information security	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 25 Art. 32	€24,000
2026-09-03	Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 12 Art. 13	€8,000
2026-08-06	Leontinoi Società Cooperativa Sociale Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 12 Art. 15 Art. 31	€1,000
2026-07-23	TIM S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 7 Art. 15	€9,516,000
2026-07-23	Emiglia-Romagna Regional Employment Agency Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€30,000
2026-07-23	Bologna University Hospital IRCCS Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€10,000
2026-07-23	Monza and Brianza Local Education Authority Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€10,000
2026-07-23	Municipality of Terralba Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 24 Art. 25	€8,000
2026-07-23	Top Secrert Investigazioni e sicurezza s.r.l. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 13	€6,500
2026-07-23	Ancel Keys Comprehensive School Castelnuovo Cilento Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€2,000
2026-07-14	NIER Ingeriegna S.p.A. SB Insufficient technical and organisational measures to ensure information security	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 32	€120,000
2026-07-14	Municipality of Rieti Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 24 Art. 25	€6,000
2026-07-14	La Terrazza Insufficient fulfilment of information obligations	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 13	€700
2026-07-03	Hera Comm S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€5,800,000
2026-07-03	EstEnergy S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€1,400,000
2026-07-03	Cerved Group S.p.A. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15	€400,000
2026-07-03	Character Technologies Inc. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 13 Art. 14	€158,000
2026-07-03	Experian Italia S.p.A. Non-compliance with general data processing principles	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 12 Art. 15 Art. 25	€120,000
2026-07-03	Società Editoriale Il Fatto S.p.A. Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5	€23,750
2026-07-03	University of Pisa Insufficient technical and organisational measures to ensure information security	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 25 Art. 32	€15,000
2026-07-03	Giuliano Isontina University Health Authority Insufficient technical and organisational measures to ensure information security	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 9 Art. 25 Art. 32	€10,000
2026-07-03	Municipality of Villaputzu Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6	€2,000
2026-07-03	Municipality of San Genesio and Uniti Insufficient legal basis for data processing	🇮🇹 Italian Data Protection Authority (Garante)	Art. 5 Art. 6 Art. 9	€2,000
2026-06-18	Acquirente Unico S.p.A. Insufficient fulfilment of data subjects rights	🇮🇹 Italian Data Protection Authority (Garante)	Art. 12 Art. 16 Art. 28	€90,000

1–25 of 663 next →