Skip to content

🇪🇺 Italian Data Protection Authority (Garante)

606 decisions · €235.6M total fines · ITALY →

Date ↓ Company / party Authority Articles Fine
2022-04-28 'Isabella Gonzaga' high school
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 2 €2,500
2022-04-28 Ekss s.r.l.
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €2,000
2022-04-28 Comune di Partanna
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €2,000
2022-04-28 Direzione Didattica Statale 1° Circolo-Eboli
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 2 €1,500
2022-04-28 Educationest s.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6 €1,000
2022-04-26 ASST di Lodi
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 32 €1,000
2022-04-07 Palumbo Superyacht Ancona s.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 12Art. 15 €50,000
2022-04-07 ISWEB S.p.A.
Insufficient data processing agreement
🇪🇺 Italian Data Protection Authority (Garante) Art. 28 €40,000
2022-04-07 Azienda ospedaliera di Perugia
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 14Art. 25 €40,000
2022-04-07 Made in Italy s.r.l.s.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 6Art. 7Art. 15Art. 17 €20,000
2022-04-07 Rebirth s.r.l.
Insufficient fulfilment of information obligations
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 114Art. 157 €15,000
2022-04-07 Tecnomed Trento s.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 29Art. 32 €10,000
2022-04-07 Findomestic Banca spa
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5 €10,000
2022-04-07 E-Mac Professional s.r.l.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12Art. 15 €10,000
2022-03-24 Brav s.r.l.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 32 €10,000
2022-03-10 Azienda USL Toscana Centro
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 32 €10,000
2022-03-10 Alfa Shipyard s.r.l.
Insufficient cooperation with supervisory authority
🇪🇺 Italian Data Protection Authority (Garante) Art. 58 €10,000
2022-03-10 Agenzia Regionale per la Tutela dell'Ambiente dell'Abruzzo
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 10Art. 2 €8,000
2022-03-10 Azienda sanitaria provinciale di Caltanissetta
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 15 €6,000
2022-02-10 Scanshare S.r.l.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 28Art. 32 €10,000
2022-02-10 Costampress S.p.A.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13 €10,000
2022-02-10 Region of Tuscany
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €10,000
2022-02-10 Arte del vivere S.r.l.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12Art. 17Art. 157 €5,000
2022-02-10 Azienda socio sanitaria territoriale Melegnano e della Martesana
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €3,500
2022-02-10 Comune di Guidizzolo
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €2,000