BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 23 Jan 2014 | Valter Mancinelli BottoniValter Mancinelli Bottoni was fined 2,400 EUR by the Garante. The case concerned failure to provide the simplified information required by the data protection code when operating a video surveillance system at a non-profit association. | IT | Garante | GDPR | €2,400 | ↗ |
| 01 Dec 2022 | Regione LazioThe Garante fined Regione Lazio EUR 100,000 for unlawfully collecting metadata from employees' emails without a proper legal basis. The authority found that the processing did not meet the legal requirements for monitoring employee communications. | IT | Garante | GDPR | €100,000 | ↗ |
| 24 Mar 2022 | Azienda sanitaria provinciale di CaltanissettaAzienda sanitaria provinciale di Caltanissetta was fined for failing to update the Data Protection Officer’s contact details on its website and in communications with the Authority. The conduct breached GDPR Article 37. | IT | Garante | GDPR | €6,000 | ↗ |
| 25 Sept 2025 | Comune di PazzanoThe Garante imposed a fine of 3,960 EUR on Comune di Pazzano for failing to meet data protection obligations. The case concerned, among other issues, the improper provision of the Data Protection Officer’s contact details and other GDPR requirements. | IT | Garante | GDPR | €3,960 | ↗ |
| 27 Jan 2022 | T.S.M. s.r.l.T.S.M. s.r.l. was fined EUR 40,000 by the Italian supervisory authority, the Garante. The sanction concerned the failure to respond to information requests, which breached GDPR obligations related to data subject rights. | IT | Garante | GDPR | €40,000 | ↗ |
| 13 Feb 2007 | Asl n. 5 CrotoneAsl n. 5 Crotone was fined by the Garante for failing to notify the processing of sensitive personal data, including genetic and health data. The notification requirement was set out in the Italian Data Protection Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 07 Apr 2022 | Findomestic Banca spaFindomestic Banca spa was fined by the Garante 10,000 EUR for improperly contacting a third party, namely the debtor’s spouse, about a financial obligation. The authority found that this conduct constituted a GDPR violation. | IT | Garante | GDPR | €10,000 | ↗ |
| 01 Oct 2015 | dr. Ruben Omar UnzurrunzagaDr. Ruben Omar Unzurrunzaga was fined by the Garante for processing clients’ personal data for medical purposes without obtaining documented consent. The authority found a breach of Article 23 of the Italian Data Protection Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 07 May 2015 | Lucchese FrancoLucchese Franco was fined by the Garante EUR 12,000 for retaining surveillance footage beyond the legally prescribed period. The case concerned non-compliance with data protection retention rules. | IT | Garante | GDPR | €12,000 | ↗ |
| 01 Dec 2022 | A.R.N.A.S. CivicoA.R.N.A.S. Civico was fined EUR 6,000 by the Italian authority Garante. The authority found breaches of lawfulness, fairness, transparency, and data minimization principles. | IT | Garante | GDPR | €6,000 | ↗ |
| 12 Jun 2014 | La Pergola s.r.l.La Pergola s.r.l. was fined EUR 4,800 by the Garante for collecting personal data through its website without the required information notice. This breached Article 13 of the Italian Data Protection Code. | IT | Garante | GDPR | €4,800 | ↗ |
| 10 Apr 2025 | Immobiliare Valdalpone S.r.l.Immobiliare Valdalpone S.r.l. was fined by the Garante 15,000 EUR for making unsolicited marketing calls without proper consent. The authority also found inadequate data protection measures. | IT | Garante | GDPR | €15,000 | ↗ |
| 21 Jan 2016 | Comune di AdriaComune di Adria was fined EUR 4,000 by the Garante for unlawfully disclosing personal data of third parties. The authority sent photographic results to a complainant that contained data relating to other individuals, breaching data protection rules. | IT | Garante | GDPR | €4,000 | ↗ |
| 04 Dec 2014 | Nautica Cicuttin s.r.l.Nautica Cicuttin s.r.l. was fined by the Garante 2,400 EUR for providing inadequate information to data subjects about the processing of personal data collected through a web form on its website. The breach concerned the duty to provide clear information before collecting the data. | IT | Garante | GDPR | €2,400 | ↗ |
| 10 Jul 2025 | Cooperativa Sociale CoopseliosCooperativa Sociale Coopselios was fined by the Garante €10,000 for failing to properly handle data subject requests. The нарушения concerned the GDPR rights of access, rectification, and data portability. | IT | Garante | GDPR | €10,000 | ↗ |
| 10 Jul 2025 | Magna PT S.p.A.Magna PT S.p.A. was fined EUR 50,000 by the Garante for requiring employees to complete a questionnaire after absences due to illness. The authority found that this practice breached GDPR rules on the processing of personal data. | IT | Garante | GDPR | €50,000 | ↗ |
| 27 Apr 2023 | Benetton Group S.r.l.Benetton Group S.r.l. was fined €240,000 by the Italian data protection authority, Garante. The authority found violations in the processing of personal data for marketing and profiling purposes, including the retention of former customers’ data for more than 10 years without proper justification. | IT | Garante | GDPR | €240,000 | ↗ |
| 01 Dec 2022 | WoolenWoolen was fined EUR 3,000 by the Garante for a video surveillance system that did not meet transparency requirements. The authority cited a breach of GDPR Article 13 and Article 114 of the Italian Privacy Code. | IT | Garante | GDPR | €3,000 | ↗ |
| 14 Dec 2017 | Yahoo Italia s.r.l.Yahoo Italia s.r.l. was fined EUR 80,000 by the Garante for violations related to the processing of personal data concerning the geolocation of users connecting to its website. The case concerned irregularities in how these data were collected and processed. | IT | Garante | GDPR | €80,000 | ↗ |
| 12 Mar 2026 | La7 S.p.A.La7 S.p.A. was fined 40,000 EUR by the Garante for broadcasting personal data, including phone numbers and names, during a news segment. The authority found a breach of GDPR Article 5 on data processing principles. | IT | Garante | GDPR | €40,000 | ↗ |