Italy

Sole Trader

1,500 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-02-12.

Rank · Sector

#80

of 107 in Accommodation and Hospitality

Rank · Italy

#578

of 625

Rank · All fines

#2,716

of 3,275

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-02-12
Controller / Processor: Sole Trader
Sector: Accommodation and Hospitality
Quoted Articles: Art. 5 (1) a) GDPR, Art. 13 GDPR, Art. 25 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 1,500 on a sole trader. The controller operates a pizzeria and installed video surveillance to protect it. However, the video surveillance captured areas outside the sole trader's property, and data subjects were not informed about the processing. Additionally, the CCTV equipment captured a traffic accident, and the controller disclosed the footage to one of the parties involved.

Open original source Links to the regulator's original publication or another source.