Skip to content

🇪🇺 Italian Data Protection Authority (Garante)

606 decisions · €235.6M total fines · ITALY →

Date ↓ Company / party Authority Articles Fine
2022-12-01 Store owner
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €2,000
2022-11-24 Areti spa
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 15Art. 24 €1,000,000
2022-11-24 Società Lombarda Sport s.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €4,000
2022-11-24 Ordine dei Medici Chirurghi e degli Odontoiatri della Provincia di Cagliari
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €3,000
2022-11-24 STS Di Prisinzano s.r.l
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €1,000
2022-11-24 Private individual
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 32 €1,000
2022-11-10 Vodafone Italia S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €500,000
2022-11-10 Azienda Usl Valle d'Aosta
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 25Art. 32 €40,000
2022-11-10 Sportitalia
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 13Art. 30 €20,000
2022-11-10 Poliambulatorio Radiologico 'il Sorriso' S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 37 €15,000
2022-11-10 I-Model s.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 6Art. 17 €10,000
2022-11-10 Conservatorio di Musica S. Cecilia di Roma
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 38Art. 2 €6,000
2022-11-10 Cisterna di Latina Municipality
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 37 €5,000
2022-11-10 Cisterna di Latina municipality
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 37 €5,000
2022-11-10 Villafranca di Verona municipality
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €4,000
2022-10-20 Douglas Italia S.p.a.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €1,400,000
2022-10-20 Comune di Salento
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 13 €12,000
2022-10-20 Italian Archery Federation (FITARCO)
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 10Art. 2 €10,000
2022-10-20 Azienda Ospedaliero-Universitaria Careggi di Firenze
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 32 €9,000
2022-10-20 I.S.P.R.O.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €7,000
2022-10-20 Fondazione Teatro Regio di Torino
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €5,000
2022-10-20 Istituto di Istruzione Superiore G. Renda di Polistena, Reggio Calabria
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €900
2022-10-06 Alpha Exploration
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €2,000,000
2022-10-06 Veneto region
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €100,000
2022-10-06 Servizio Idrico Integrato S.c.p.a.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 32 €15,000