Skip to content

🇪🇺 Italian Data Protection Authority (Garante)

663 decisions · €259.5M total fines · ITALY →

Date ↓ Company / party Authority Articles Fine
2021-02-25 Ministero dell’Istruzione, Ufficio Scolastico Regionale per il Lazio
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9 €4,000
2021-02-25 Comune di Conflenti
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6 €2,000
2021-02-11 Roma Capitale
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 28Art. 32 €350,000
2021-02-11 Ministero dello Sviluppo Economico
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 37 €75,000
2021-02-11 Roma Servizi per La Mobilita S.r.l.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 32 €60,000
2021-02-11 Istituti ospedalieri bergamaschi
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 32 €45,000
2021-02-11 Fondazione di religione e di culto “Casa sollievo della sofferenza” Opera di San Pio da Pietrelcina
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €5,000
2021-01-27 Azienda USL della Romagna
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 32 €50,000
2021-01-27 Azienda Ospedaliero Universitaria Senese
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €50,000
2021-01-27 Azienda Ospedaliero Universitaria di Parma
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €10,000
2021-01-27 City of Rome (Roma capitale)
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €10,000
2021-01-14 Regione Lazio
Insufficient data processing agreement
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 28 €75,000
2021-01-14 Azienda sanitaria provinciale di Enna
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9 €30,000
2021-01-14 Azienda Usl di Bologna
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €18,000
2021-01-14 Agenzia regionale protezione ambientale Campania (ARPAC)
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 32 €8,000
2021-01-14 Poliambulatorio Talenti S.r.l.
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12Art. 15 €2,000
2020-12-17 Roma Capitale (Rome Municipality)
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 14Art. 28 €500,000
2020-12-17 Azienda Unità Sanitaria Locale Toscana Sud Est
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 14Art. 28 €100,000
2020-12-17 Miropass S.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 28 €40,000
2020-12-17 Comune di Luino
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 37 €10,000
2020-12-17 Comune di Santo Stefano Belbo
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6 €4,000
2020-12-17 Ordine degli Assistenti Sociali della Regione Lazio
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 12 €2,000
2020-11-26 Concentrix Cvg Italy s.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9 €20,000
2020-11-26 Reti Televisive Italiane S.p.a.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5 €10,000
2020-11-26 Charly Mike s.r.l.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €3,000