Italy

Eni S.p.A.

96,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-03-26.

Rank · Sector

#81

of 597 in Industry and Commerce

Rank · Italy

#85

of 543

Rank · All fines

#499

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-03-26
Controller / Processor: Eni S.p.A.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 96,000 on Eni S.p.A. The controller had been involved in a legal dispute with an NGO that had run a public campaign against them. In an attempt to defend itself publicly, the controller published court documents relating to a lawsuit initiated by the NGO and other plaintiffs, including natural persons, on its website. These documents contained the personal data of the natural persons, including their residential address, tax code and place and date of birth, which was not necessary for the purpose of the publication. The controller had no legal basis to publish this personal data.

Open original source Links to the regulator's original publication or another source.