Italy

La7 S.p.A.

40,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-03-12.

Rank · Sector

#240

of 371 in Media, Telecoms and Broadcasting

Rank · Italy

#156

of 555

Rank · All fines

#861

of 3,085

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-03-12
Controller / Processor: La7 S.p.A.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) a), c) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 40,000 on La7 S.p.A. The controller, a media company, published a journalistic report that included stock images containing the personal data of data subjects, including their phone numbers. This data was not necessary for the report.

Open original source Links to the regulator's original publication or another source.