Italy

Comune di Mazara del Vallo

4,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-02-12.

Rank · Sector

#272

of 357 in Public Sector and Education

Rank · Italy

#408

of 543

Rank · All fines

#1,948

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-02-12
Controller / Processor: Comune di Mazara del Vallo
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1), (2), (3) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 35 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 4,000 on the Comune di Mazara del Vallo. The controller used video surveillance technology to enforce traffic rules without a sufficient legal basis. Secondly, the controller used a camera system that had not been homologated or approved for this specific purpose. Beyond this, the controller failed to carry out a data protection impact assessment and to adequately inform data subjects regarding the processing.

Open original source Links to the regulator's original publication or another source.