Italy

Business Owner

2,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-03-26.

Rank · Sector

#465

of 597 in Industry and Commerce

Rank · Italy

#500

of 543

Rank · All fines

#2,425

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-03-26
Controller / Processor: Business Owner
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a) GDPR, Art. 13 GDPR, Art. 88 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 2,000 on a business owner. The controller had been using video surveillance at his business premises. However, he did not put up any signs to inform data subjects about it, nor did he obtain the necessary authorisation from the labour inspectorate.

Open original source Links to the regulator's original publication or another source.