# Deutsche Bank S.p.A.: Insufficient fulfilment of information obligations

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2026-10-07
- Original: https://www.enforcementtracker.com/ETid-3390
- Canonical: https://overview.legal/posts/607200
- Topics: Fairness & Transparency, Personal Data, Supervision, Processing, Transparency, Supervisory Authorities, Insurance

## Summary

The Italian Data Protection Authority (Garante) fined Deutsche Bank S.p.A. €33,000 for failing to properly fulfill its information obligations to data subjects. The Garante found that the bank's data processing practices violated the fairness principle under Article 5(1)(a) GDPR and the transparency requirements of Article 13 GDPR. The enforcement action targeted the financial institution's inadequate communication of privacy information during its processing of personal data.

## Full text

Italian Data Protection Authority (Garante) fined Deutsche Bank S.p.A. €33,000 on 2026-10-07 for: Insufficient fulfilment of information obligations.
GDPR Articles: Art. 5 (1) a) GDPR, Art. 13 GDPR
Sector: Finance, Insurance and Consulting
Country: Italy
Source: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/10310391

## Cited law provisions (4)

### GDPR — gdpr-art-5-par-1-en

Personal data shall be:

### GDPR — gdpr-art-5-par-1-pnt-a-en

processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);

### GDPR — gdpr-art-5-en

Principles relating to processing of personal data

### GDPR — gdpr-art-13-en

Information to be provided where personal data are collected from the data subject

---
Generated by overview.legal · https://overview.legal/posts/607200 · 2026-11-14