Italy

Edizioni Grandangolo di Giuseppe Castaldo

2,075 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-06-18.

Rank · Sector

#120

of 356 in Individuals and Private Associations

Rank · Italy

#490

of 604

Rank · All fines

#2,311

of 3,170

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-06-18
Controller / Processor: Edizioni Grandangolo di Giuseppe Castaldo
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) f), (2) GDPR, Art. 12 (1), (2) GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 25 GDPR, Art. 32 GDPR, Art. 33 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 2,075 on Edizione Grandangolo di Giuseppe Castaldo. The data subject filed a complaint stating that even after requesting the deletion of their personal data their name and images remained accessible in an online news publication. The publication had published this personal data while the data subject was still a minor. The subsequent investigation found that the publication had been the victim of a cyber attack due to inadequate technical security measures, a fact which it had not reported to the relevant authority. The publication also lacked a privacy policy.

Open original source Links to the regulator's original publication or another source.