Italy

Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento

8,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-09-03.

Rank · Sector

#207

of 376 in Public Sector and Education

Rank · Italy

#347

of 595

Rank · All fines

#1,579

of 3,127

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-09-03
Controller / Processor: Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), e) GDPR, Art. 6 (1) c), e) GDPR, Art. 12 GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 8,000 on Azienda Speciale per la Gestione degli Impianti Sportivi del Comune di Trento. Following a press report, the authority discovered that CCTV cameras had been installed in the changing rooms of a swimming facility managed by the controller. Although the controller stated that signs had been installed to inform people about the cameras, processing personal data in this way is unlawful due to the excessive and intrusive breach of dignity and privacy involved. Although the signage informed people about the existence of the CCTV system, it did not inform data subjects adequately about the processing of their data. Furthermore, the retention period for the footage (72 hours) was deemed too long; the controller had not conducted an assessment regarding the necessary retention period for the purpose of processing.

Open original source Links to the regulator's original publication or another source.