Italy

Copacabana s.r.l.

2,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-03-26.

Rank · Sector

#63

of 100 in Accomodation and Hospitality

Rank · Italy

#499

of 543

Rank · All fines

#2,424

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-03-26
Controller / Processor: Copacabana s.r.l.
Sector: Accomodation and Hospitality
Quoted Articles: Art. 5 (1) a) GDPR, Art. 13 GDPR, Art. 88 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 2,000 on Copacabana s.r.l. The controller operates a restaurant in Rome and uses video surveillance after being subjected to theft. However, the controller did not put up any signs to inform data subjects about the video surveillance, and failed to obtain the necessary authorisation from the labour inspectorate.

Open original source Links to the regulator's original publication or another source.