Italy

La7 S.p.A.

40,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-03-12.

Rank · Sector

#238

of 369 in Media, Telecoms and Broadcasting

Rank · Italy

#154

of 543

Rank · All fines

#848

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-03-12
Controller / Processor: La7 S.p.A.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) a), c) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 40,000 on La7 S.p.A. The controller, a media company, published a journalistic report that included stock images containing the personal data of data subjects, including their phone numbers. This data was not necessary for the report.

Open original source Links to the regulator's original publication or another source.