Italy
Data Controller
1,000 €
GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-12-18.
Rank · Sector
#180
of 218 in Not assigned
Rank · Italy
#532
of 543
Rank · All fines
#2,720
of 3,050
Case details
- Authority
- Italian Data Protection Authority (Garante)
- Date
- 2025-12-18
- Controller / Processor
- Data Controller
- Sector
- Not assigned
- Quoted Articles
- Art. 5 (1) a) GDPR, Art. 6 GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
The Italian DPA has imposed a fine of EUR 1,000 on a data controller. The controller disclosed personal data by sending an email to an address that third parties who were not meant to receive the data had access to.
Open original source
Links to the regulator's original publication or another source.
Related fines
Italy
2024-02-08
79,100,000 €
ETid-2306
Enel Energia SpA
Transportation and Energy
Italy
2026-03-26
31,800,000 €
ETid-3162
Intesa Sanpaolo S.p.A.
Finance, Insurance and Consulting
Italy
2020-01-15
27,800,000 €
ETid-189
TIM (telecommunications operator)
Media, Telecoms and Broadcasting
Italy
2022-02-10
20,000,000 €
ETid-1098
Clearview Al Inc.
Industry and Commerce
Italy
2020-07-13
16,700,000 €
ETid-336
Wind Tre S.p.A.
Media, Telecoms and Broadcasting
Italy
2024-11-02
15,000,000 €
ETid-2497
OpenAI OpCo LLC
Media, Telecoms and Broadcasting