🇪🇺 Italian Data Protection Authority (Garante)
606 decisions · €235.6M total fines · ITALY →
| Date ↓ | Company / party | Authority | Articles | Fine |
|---|---|---|---|---|
| 2024-03-07 | Banca di Credito Cooperativo Appulo Lucana soc. cooperativa Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €20,000 |
| 2024-03-07 | Bar Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13Art. 114 | €2,000 |
| 2024-02-22 | Azienda Trasporto Passeggeri Emilia-Romagna S.p.A. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €50,000 |
| 2024-02-22 | Camera di Commercio Industria Artigianato e Agricoltura Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €2,000 |
| 2024-02-08 | UniCredit S.p.a. Insufficient technical and organisational measures to ensure information security | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 32 | €2,800,000 |
| 2024-02-08 | NTT Data Italia S.P.A Insufficient fulfilment of data breach notification obligations | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 28Art. 33 | €800,000 |
| 2024-02-08 | Medtronic Italia Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 12Art. 13 | €300,000 |
| 2024-02-08 | Azienda socio-sanitaria locale n. 1 di Sassari Insufficient technical and organisational measures to ensure information security | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 32 | €18,000 |
| 2024-02-07 | Wi-Planet sas di Torri Carlo Alberto e c. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €5,000 |
| 2024-01-31 | Municipality of Siracusa Insufficient involvement of data protection officer | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 37 | €5,000 |
| 2024-01-31 | Provincia di Sassari Insufficient involvement of data protection officer | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 37 | €2,000 |
| 2024-01-31 | Libero Consorzio comunale di Caltanissetta Insufficient involvement of data protection officer | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 37 | €2,000 |
| 2024-01-31 | Provincia di Catanzaro Insufficient involvement of data protection officer | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 37 | €2,000 |
| 2024-01-24 | Municipality of Salento Insufficient cooperation with supervisory authority | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 58Art. 157 | €8,000 |
| 2024-01-24 | Municipality Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 9Art. 37 | €6,000 |
| 2024-01-24 | Istituto Comprensivo Statale “F.S. Cabrini Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 2 | €2,000 |
| 2023-12-21 | Company Insufficient fulfilment of information obligations | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13 | €2,000 |
| 2023-12-07 | Azienda socio sanitaria territoriale nord Milano, C.F. Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 9Art. 25Art. 32 | €40,000 |
| 2023-12-07 | Mushtaq Rubina Kebabish Insufficient fulfilment of information obligations | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13 | €2,000 |
| 2023-12-07 | Sirio S.p.A. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 13 | €1,000 |
| 2023-11-30 | Limit Call S.r.l.s. Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 7Art. 12 | €60,000 |
| 2023-11-30 | A R.L Spartan Gym Non-compliance with general data processing principles | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 13Art. 114 | €3,000 |
| 2023-11-30 | Techno Security s.r.l. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €1,000 |
| 2023-11-16 | Autostrade per l’Italia S.p.A. Insufficient fulfilment of data subjects rights | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 12Art. 15 | €100,000 |
| 2023-11-16 | Comune di Castel Goffredo Insufficient legal basis for data processing | 🇪🇺 Italian Data Protection Authority (Garante) | Art. 5Art. 6Art. 12Art. 13 | €50,000 |