# RCS Mediagroup Spa: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2023-08-31
- Original: https://www.enforcementtracker.com/ETid-2047
- Canonical: https://overview.legal/posts/48162
- Topics: Personal Data, IP Address, Controllers, Processing Agreement, Telecommunications, Processing, Data Controller, Supervisory Authorities, Law Enforcement

## Summary

The Italian DPA has imposed a fine of EUR 10,000 on RCS Mediagroup Spa. A data subject had filed a complaint with the DPA due to the fact that their personal data had been published in an online newspaper on a photo showing the will of a recently deceased actress, of whom they had been a witness. The data subject stated that after the publication they had been contacted by acquaintances and journalists who asked for more information on the death of the actress. The DPA found that the controller

## Full text

The Italian DPA has imposed a fine of EUR 10,000 on RCS Mediagroup Spa. A data subject had filed a complaint with the DPA due to the fact that their personal data had been published in an online newspaper on a photo showing the will of a recently deceased actress, of whom they had been a witness. The data subject stated that after the publication they had been contacted by acquaintances and journalists who asked for more information on the death of the actress. The DPA found that the controller did not have a valid legal basis to publish the personal data and that the publication was not relevant for the coverage.

GDPR Articles: Art. 5 (1) a), c) GDPR, Art. 2-quater (4) Codice della privacy, Art. 137 Codice della privacy, Art. 139 Codice della privacy
Industry: Media, Telecoms and Broadcasting

---
Generated by overview.legal · https://overview.legal/posts/48162 · 2026-08-22