Italy

Comune di Tuscania

12,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-12-04.

Rank · Sector

#167

of 357 in Public Sector and Education

Rank · Italy

#250

of 543

Rank · All fines

#1,291

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-12-04
Controller / Processor: Comune di Tuscania
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) c, e), (2), (3) GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 28 GDPR, Art. 35 GDPR, Art. 58 (1) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 12,000 on the Commune di Tuscania. The controller had been using video surveillance and licence plate recognition within its territory for the purposes of territorial security and supervising separate waste collection at recycling centers. However, the controller did not put up any relevant signs containing the privacy policy or warning signs. The controller also failed to enter into data processing agreements with processors handling data on its behalf, failed to adequately respond to data subjects' requests to exercise their rights, and failed to cooperate adequately with the DPA.

Open original source Links to the regulator's original publication or another source.