# Bees S.r.l.: Insufficient fulfilment of data subjects rights

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2026-09-03
- Original: https://www.enforcementtracker.com/ETid-3397
- Canonical: https://overview.legal/posts/607207
- Topics: Personal Data, Right to Object, Right to be Forgotten, Controllers, Accountability, Supervision, Supervisory Authorities

## Summary

The Italian Data Protection Authority (Garante) fined Bees S.r.l. €2,000 for insufficiently fulfilling data subjects' rights, specifically finding violations of Article 5(2) regarding controller accountability, Article 17 concerning the right to erasure, and Article 21 concerning the right to object to processing. The enforcement action addressed the company's failure to properly respond to individuals exercising their GDPR rights in the Industry and Commerce sector.

## Full text

Italian Data Protection Authority (Garante) fined Bees S.r.l. €2,000 on 2026-09-03 for: Insufficient fulfilment of data subjects rights.
GDPR Articles: Art. 5 (2) GDPR, Art. 17 GDPR, Art. 21 GDPR
Sector: Industry and Commerce
Country: Italy
Source: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/10301671

## Cited law provisions (4)

### GDPR — gdpr-art-5-par-2-en

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).

### GDPR — gdpr-art-5-en

Principles relating to processing of personal data

### GDPR — gdpr-art-17-en

Right to erasure (‘right to be forgotten’)

### GDPR — gdpr-art-21-en

Right to object

---
Generated by overview.legal · https://overview.legal/posts/607207 · 2026-11-14