Skip to content

🇪🇺 ITALY

548 decisions · €190.0M total fines · Italian Data Protection Authority (Garante)

Date ↓ Company / party Authority Articles Fine
2025-07-23 Order of Nursing Professions of Viterbo
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 32 €10,000
2025-07-23 SATI S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €10,000
2025-07-10 Poste Vita S.p.a.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 33 €80,000
2025-07-10 Poste Vita S.p.a.
Insufficient technical and organisational measures to ensure information security
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 33 €80,000
2025-07-10 Magna PT S.p.A.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 13 €50,000
2025-07-10 Magna PT S.p.A.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9Art. 13 €50,000
2025-07-10 Nursery School “La Combricola Dei Birichini Di Betty”
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €10,000
2025-07-10 Nursery School “La Combricola Dei Birichini Di Betty”
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €10,000
2025-07-10 Università degli Studi di Cassino e del Lazio Meridionale
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 17 €8,000
2025-07-10 Università degli Studi di Cassino e del Lazio Meridionale
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 17 €8,000
2025-07-10 Istituto Comprensivo 2 C.D. “G. Modugno” S.M. “G. Galilei” di Monopoli
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9 €4,000
2025-07-10 Istituto Comprensivo 2 C.D. “G. Modugno” S.M. “G. Galilei” di Monopoli
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 9 €4,000
2025-07-10 Comune di Conversano
Lack of appointment of data protection officer
🇪🇺 Italian Data Protection Authority (Garante) Art. 37 €3,000
2025-07-10 Comune di Conversano
Lack of appointment of data protection officer
🇪🇺 Italian Data Protection Authority (Garante) Art. 37 €3,000
2025-06-04 Noi Compriamo Auto.it S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 24 €45,000
2025-06-04 Noi Compriamo Auto.it S.r.l.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 12Art. 24 €45,000
2025-05-21 Autostrade per l’Italia S.p.A.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 88 €420,000
2025-05-21 Autostrade per l’Italia S.p.A.
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 88 €420,000
2025-05-21 Menarini Silicon Biosystems SpA
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €21,000
2025-05-21 Menarini Silicon Biosystems SpA
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 13 €21,000
2025-05-21 Health Protection Agency of the Metropolitan City of Milan, Workplace Prevention and Safety Service, Milan North
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €7,000
2025-05-21 Health Protection Agency of the Metropolitan City of Milan, Workplace Prevention and Safety Service, Milan North
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 9 €7,000
2025-04-29 Energia Verde S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €100,000
2025-04-29 Energia Verde S.p.A.
Non-compliance with general data processing principles
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 7Art. 12 €100,000
2025-04-29 Regione Lombardia
Insufficient legal basis for data processing
🇪🇺 Italian Data Protection Authority (Garante) Art. 5Art. 6Art. 25Art. 28 €50,000