Italy

Comune di Monterotondo

2,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-02-12.

Rank · Sector

#332

of 356 in Public Sector and Education

Rank · Italy

#493

of 543

Rank · All fines

#2,409

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-02-12
Controller / Processor: Comune di Monterotondo
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 13 GDPR, Art. 88 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 2,000 on the Comune di Monterotondo. The controller used video surveillance to protect property, but installed the cameras in such a way that they film public areas, which is unnecessary for the purpose of data processing.

Open original source Links to the regulator's original publication or another source.