Italy

Comune di Arvier

4,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-09-23.

Rank · Sector

#294

of 391 in Public Sector and Education

Rank · Italy

#457

of 613

Rank · All fines

#2,069

of 3,223

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-09-23
Controller / Processor: Comune di Arvier
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) c), e), (2), (3) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 25 GDPR, Art. 35 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 4,000 on the Comune di Arvier. The municipality installed a CCTV and number plate recognition system in 2011. One camera in this system filmed data subjects' balconies and windows. While the authority had no objections to installing the system for security purposes, the stated purposes of traffic, parking, waste and environmental regulation were deemed inadequate. Furthermore, the signage informing people about the system was inadequate, as was the 2018 impact assessment.

Open original source Links to the regulator's original publication or another source.