Italy

Sole Trader

1,500 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-02-12.

Rank · Sector

#75

of 100 in Accomodation and Hospitality

Rank · Italy

#508

of 543

Rank · All fines

#2,532

of 3,051

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-02-12
Controller / Processor: Sole Trader
Sector: Accomodation and Hospitality
Quoted Articles: Art. 5 (1) a) GDPR, Art. 13 GDPR, Art. 25 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 1,500 on a sole trader. The controller operates a pizzeria and installed video surveillance to protect it. However, the video surveillance captured areas outside the sole trader's property, and data subjects were not informed about the processing. Additionally, the CCTV equipment captured a traffic accident, and the controller disclosed the footage to one of the parties involved.

Open original source Links to the regulator's original publication or another source.