Skip to content

🇪🇺 Italian Data Protection Authority (Garante)

606 decisions · €235.6M total fines · ITALY →

Date ↓ Company / party Authority Articles Fine
2024-06-20 Medical association
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12Art. 13Art. 15 €4,000
2024-06-06 Eni Plenitude S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 24Art. 25 €6,419,631
2024-06-06 CA Autobank S.p.A.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12Art. 15 €1,000,000
2024-06-06 Cappello Giovanni & Figli s.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 13 €120,000
2024-06-06 Comune di Ustica
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 37 €500
2024-05-23 Azienda Sanitaria Locale TO4
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €8,400
2024-05-23 Azienda Socio-sanitaria Territoriale Rhodense
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 16 €4,500
2024-05-23 Professional association
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 27Art. 2 €3,500
2024-05-09 Azienda ospedale università di Padova
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 25Art. 32 €75,000
2024-05-09 Azzurro Club Hotels S.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 6Art. 12Art. 15Art. 130 €10,000
2024-05-09 Polisportiva Mimmo Ferrito s.r.l..
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12Art. 15 €3,000
2024-05-09 Medical association
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €3,000
2024-04-24 Rossi Carta S.r.l.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 6Art. 7Art. 12Art. 15 €30,000
2024-04-24 Gestore Dei Servizi Energetici - Gse S.p.A.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12Art. 15 €30,000
2024-04-24 C.I.E.L. S.p.A.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12Art. 15 €10,000
2024-04-24 Dly S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 88Art. 114 €5,000
2024-04-24 I.N.P.A.S.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 2 €3,000
2024-04-11 Facile.Energy S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 24Art. 25 €100,000
2024-04-11 Olimpia S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 24Art. 25 €100,000
2024-04-11 Innova Camara
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5 €25,000
2024-04-11 Istituto Nazionale di Previdenza Sociale
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €20,000
2024-04-11 Libero Consorzio comunale di Enna
Insufficient involvement of data protection officer
🇪🇺 Italian Data Protection Authority (Garante) Art. 37Art. 38 €6,000
2024-04-11 Store owner
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €1,000
2024-03-21 Azienda sanitaria locale Roma 3
Insufficient fulfilment of data breach notification obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 33 €10,000
2024-03-07 Centro Riparazioni Piacentino S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €20,000