Italy

Lex Iuris S.r.l.

15,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-02-12.

Rank · Sector

#150

of 357 in Public Sector and Education

Rank · Italy

#237

of 543

Rank · All fines

#1,223

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-02-12
Controller / Processor: Lex Iuris S.r.l.
Sector: Public Sector and Education
Quoted Articles: Art. 6 (1) a) GDPR, Art. 15 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 15,000 on Lex Iuris S.r.l. The controller sent promotional emails to data subjects after mistakenly transferring those email addresses to a marketing list without their consent. Additionally, the controller failed to adequately respond to the data subjects' requests to exercise their rights.

Open original source Links to the regulator's original publication or another source.