Italy

Società Editoriale Il Fatto S.p.A.

23,750 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-07-03.

Rank · Sector

#276

of 374 in Media, Telecoms and Broadcasting

Rank · Italy

#194

of 595

Rank · All fines

#1,029

of 3,127

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-07-03
Controller / Processor: Società Editoriale Il Fatto S.p.A.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) a), c) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 23,750 on Società Editoriale Il Fatto S.p.A. The controller is the publisher of a newspaper in which an article about a cable car accident in 2021 was published. The article contained the data subject's personal data and also disclosed information about their hospital admission following the accident. The article also related to the data subject's romantic and other personal relationships. The data subject requested the article's removal through anonymisation and de-indexing, and the controller subsequently de-indexed the article. However the article was still searchable via mainstream search engines, leading the data subject to request deletion and de-indexing a second time. Although the aforementioned incident was of public interest the authority stated that the disclosure of the data subject's personal data and relationships was unnecessary for the public to understand the case.

Open original source Links to the regulator's original publication or another source.