Italy
Data Controller
1,000 €
GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-12-18.
Rank · Sector
#185
of 224 in Not assigned
Rank · Italy
#586
of 604
Rank · All fines
#2,850
of 3,197
Case details
- Authority
- Italian Data Protection Authority (Garante)
- Date
- 2025-12-18
- Controller / Processor
- Data Controller
- Sector
- Not assigned
- Quoted Articles
- Art. 5 (1) a) GDPR, Art. 6 GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
The Italian DPA has imposed a fine of EUR 1,000 on a data controller. The controller disclosed personal data by sending an email to an address that third parties who were not meant to receive the data had access to.
Open original source
Links to the regulator's original publication or another source.
Related fines
Italy
2024-02-08
79,100,000 €
ETid-2306
Enel Energia SpA
Transportation and Energy
Italy
2026-03-26
31,800,000 €
ETid-3162
Intesa Sanpaolo S.p.A.
Finance, Insurance and Consulting
Italy
2020-01-15
27,800,000 €
ETid-189
TIM (telecommunications operator)
Media, Telecoms and Broadcasting
Italy
2022-02-10
20,000,000 €
ETid-1098
Clearview Al Inc.
Industry and Commerce
Italy
2020-07-13
16,700,000 €
ETid-336
Wind Tre S.p.A.
Media, Telecoms and Broadcasting
Italy
2024-11-02
15,000,000 €
ETid-2497
OpenAI OpCo LLC
Media, Telecoms and Broadcasting