Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Network of Agencies and Companies: Non-compliance with general data processing principles

The Italian DPA imposed a fine of EUR 850,000 on a network of agencies and companies.

€850,000 Fine
Network of Agencies and Companies
ITALY
Art. 5 GDPR Art. 6 GDPR Art. 7 GDPR Art. 13 GDPR Art. 28 GDPR Art. 29 GDPR Art. 31 GDPR Art. 32 GDPR Art. 58 GDPR
Supervisory Authorities Processing Agreement Processing Marketing Fines
Apr 10, 2025 Source gpdp.it

Full text

The Italian DPA imposed a fine of EUR 850,000 on a network of agencies and companies. The network operated on behalf of Acea Energia S.p.A. and engaged in aggresive customer recovery and marketing calls, ETid-2660. The agencies and companies had no sufficient legal basis for the data processing and also failed to comply with other general data processing principles. The severety of the infirngiments vary in between the different agencies and companies. Following individual fines had been imposed: Ms. Stefanelli Federica has been fined with a sum of EUR 45,000. M.G. Company s.r.l had been fined with a sum of EUR 200,000. Fer-Energy s.r.l. had been fined with a sum of EUR 500,000. Fer-Energy Call s.r.l. had been findes with a sum of EUR 75,000. Diemme Group di Di Vico Luigi had been fined with a sum of EUR 30,000.

Industry: Media, Telecoms and Broadcasting

How it connects

References

All 11

Related across sources

C-507/17 Google LLC v CNIL C-507/17 (Google Territorial Scope) CJEU Sep 24, 2019 Territorial scope (GDPR) Right to be Forgotten Direct Marketing
C-654/23 Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) Het Hof van Justitie van de EU (Eerste Kamer) beantwoordt een prejudiciële vraag over de uitleg van artikel 13 van Richtlijn 2002/58/EC (ePrivacy) en de verhouding tot de GDPR,… CJEU Mar 27, 2025 Telecommunications Personal Data Marketing
C-654/23 Inteligo Media SA v Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) The Court of Justice of the European Union ruled on a preliminary reference from the Romanian Curtea de Apel Bucureşti in proceedings between Inteligo Media SA and the Romanian… CJEU ·First Chamber Nov 13, 2025 Telecommunications Personal Data Legitimate Interest
C-601/21 Meta Platforms and Others v Bundeskartellamt C-601/21 (Meta Platforms (Bundeskartellamt)) CJEU Jul 4, 2023 Accountability IP Address Processing Agreement
C-210/16 Unabhängiges Landeszentrum für Datenschutz v Wirtschaftsakademie Schleswig-Holstein C-210/16 (Wirtschaftsakademie) CJEU Jun 5, 2018 IP Address Controllers Processors
2022 EDPB Annual Report 2021 Enhancing the depth and breadth of data protection 2 EDPB Annual Report 2021 2 ENHANCING THE DEPTH AND BREADTH OF DATA PROTECTION An Executive Summary of this report, which… May 12, 2022 Privacy Shield Processing Agreement International Transfer
Related documents