Skip to content

🇪🇺 ITALY

548 decisions · €190.0M total fines · Italian Data Protection Authority (Garante)

Date ↓ Company / party Authority Articles Fine
2021-09-16 Ciechi Ardizzone Gioeni di Catania
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 35 €5,000
2021-09-16 Farpa s.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 88Art. 114 €1,000
2021-07-22 Deliveroo Italy s.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 22Art. 25 €2,500,000
2021-07-22 Roma Capitale
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 13Art. 25 €800,000
2021-07-22 Atac s.p.a.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 30Art. 32 €400,000
2021-07-22 Regione Lombardia
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6 €200,000
2021-07-22 Flowbird Italia s.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 30 €30,000
2021-06-10 Foodinho s.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 22Art. 25 €2,600,000
2021-06-10 aiComply S.r.l.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 28Art. 32 €40,000
2021-06-10 Aeroporto Guglielmo Marconi di Bologna S.p.a.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 25Art. 32 €40,000
2021-06-10 Dentist
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5 €20,000
2021-05-27 Azienda Provinciale per i Servizi Sanitari di Trento
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €150,000
2021-05-27 Azienda Usl della Romagna
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €120,000
2021-05-13 Iren Mercato S.p.A.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7 €2,856,169
2021-05-13 Comune di Bolzano
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 13 €84,000
2021-05-13 Synlab Med srl
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9Art. 2 €20,000
2021-04-29 Santa Ninfa municipality
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 2 €2,000
2021-04-21 Fondazione Policlinico Tor Vergata di Roma
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13Art. 25Art. 32 €15,000
2021-04-15 Comune di Palermo
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 25Art. 32 €40,000
2021-04-15 Istituto Nazionale Previdenza Sociale (INPS)
Insufficient fulfilment of data subjects rights
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 12Art. 15 €12,000
2021-04-15 Physician
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9 €5,000
2021-04-15 Società triveneta di chirurgia
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9 €2,000
2021-03-25 Fastweb S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €4,500,000
2021-03-25 OneDirect Srl
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 6Art. 7Art. 30Art. 31 €30,000
2021-03-25 GEDI News Network Spa
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 12 €20,000