BULLETIN №083Last updated · 07 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 02 Dec 2021 | La Duomo S.r.l.s.La Duomo S.r.l.s. was fined EUR 20,000 by the Garante for sending unsolicited promotional SMS messages without valid consent. The authority found that the company’s conduct breached data protection rules. | IT | Garante | GDPR | €20,000 | ↗ |
| 20 Oct 2022 | Comune di Calvi RisortaThe Municipality of Comune di Calvi Risorta was fined 2,000 EUR by the Garante. The sanction resulted from a delayed response to the supervisory authority's request for information, which breached data protection rules. | IT | Garante | GDPR | €2,000 | ↗ |
| 29 Nov 2018 | Wind Tre S.p.A.Wind Tre S.p.A. was fined EUR 600,000 by the Garante for unsolicited promotional calls and SMS. The authority found breaches of several provisions of the Italian Data Protection Code. | IT | Garante | GDPR | €600,000 | ↗ |
| 10 Nov 2022 | Conservatorio di Musica S. Cecilia di RomaThe Conservatorio di Musica S. Cecilia di Roma was fined €6,000 by the Garante. The authority found unlawful processing of personal data contained in an audio/video recording used in disciplinary proceedings against a student without a lawful basis. | IT | Garante | GDPR | €6,000 | ↗ |
| 18 Sept 2014 | Blue Dream Hotel s.r.l.Blue Dream Hotel s.r.l. was fined EUR 2,400 by the Garante for processing personal data related to job applications without providing the required privacy notice. The authority found a breach of Article 13 of the Italian Data Protection Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 29 Apr 2025 | Versilmagra Immobiliare di Robertelli Davide & C. S.a.s.Versilmagra Immobiliare was fined EUR 2,000 by the Garante. The authority found that the company sent unsolicited communications via WhatsApp without proper consent and did not facilitate the exercise of data subject rights. | IT | Garante | GDPR | €2,000 | ↗ |
| 13 Jul 2016 | Gruppo Nadine s.r.l.Gruppo Nadine s.r.l. was fined by the Garante in the amount of 2,400 EUR for inadequate notices in its surveillance system. The notices did not include the name of the data controller, contrary to the privacy code requirements. | IT | Garante | GDPR | €2,400 | ↗ |
| 13 Jul 2006 | Ministero dell'istruzione (Ufficio regionale per la Campania)The Campania Regional Office of the Ministry of Education was fined by the Garante for failing to provide requested information and documents. The authority found this to be a breach of data protection rules. | IT | Garante | GDPR | €2,582 | ↗ |
| 29 Apr 2021 | Comune di TriesteComune di Trieste was fined for the unauthorized disclosure of personal data relating to individuals involved in accidents, including names, damage details, and compensation amounts. The data was improperly accessible, constituting a breach of GDPR requirements. | IT | Garante | GDPR | €45,000 | ↗ |
| 11 Feb 2021 | Azienda Unità Sanitaria Locale di ParmaAzienda Unità Sanitaria Locale di Parma was fined by the Garante €10,000 for improper handling of sensitive personal data. The violation was linked to an occasional malfunction of its IT system, which led to improper data processing. | IT | Garante | GDPR | €10,000 | ↗ |
| 28 Feb 2019 | Casinò di Venezia Meeting & Dining S.r.l.Casinò di Venezia Meeting & Dining S.r.l. was fined EUR 4,000 by the Garante. The authority found that adequate security measures had not been implemented, in breach of Article 33 of the Italian Privacy Code. | IT | Garante | GDPR | €4,000 | ↗ |
| 27 Jan 2021 | Powerplay S.r.l.Powerplay S.r.l. was fined by the Garante for making unsolicited promotional calls despite the recipient's clear request not to receive further communications. The company failed to place the number on a blacklist, which breached data protection rules. | IT | Garante | GDPR | €20,000 | ↗ |
| 06 Dec 2012 | Assicurazioni Generali s.p.a.Assicurazioni Generali s.p.a. was fined 40,000 EUR by the Garante for making an unsolicited promotional phone call. The call was placed despite the recipient's prior objection to the processing of personal data for marketing purposes. | IT | Garante | GDPR | €40,000 | ↗ |
| 01 Sept 2022 | Liceo Statale "Edoardo Amaldi” di Alzano LombardoLiceo Statale “Edoardo Amaldi” was fined EUR 4,000 by the Garante for violations related to the processing of personal data, including sensitive data. The authority found that the processing lacked a proper legal basis and adequate safeguards. | IT | Garante | GDPR | €4,000 | ↗ |
| 08 Mar 2018 | Carriere Italia s.r.l.Carriere Italia s.r.l. was fined for processing personal data revealing health status without notifying the Garante. The authority also found that required information was not provided to data subjects in job advertisements. | IT | Garante | GDPR | €10,400 | ↗ |
| 11 Mar 2021 | Plurima s.r.l.Plurima s.r.l. was fined EUR 5,000 by the Italian data protection authority, Garante. The sanction concerned unsolicited promotional calls made to individuals whose consent was not recorded in the consent database. This conduct breached GDPR requirements for marketing-related processing. | IT | Garante | GDPR | €5,000 | ↗ |
| 23 Nov 2017 | Famicord Italia s.r.l.Famicord Italia s.r.l. was fined by the Garante for processing personal data relating to health without notifying the authority. The company also collected personal data through its website without providing the required privacy notice. | IT | Garante | GDPR | €22,400 | ↗ |
| 23 Nov 2017 | Foschini Mauro e Banca Nazionale del Lavoro S.p.A.Foschini Mauro and Banca Nazionale del Lavoro S.p.A. were fined by the Garante 4,000 EUR for breaches of data protection rules. The case concerned non-compliance with provisions of the Italian Privacy Code. | IT | Garante | GDPR | €4,000 | ↗ |
| 07 Mar 2024 | Centro Riparazioni Piacentino S.p.A.Centro Riparazioni Piacentino S.p.A. was fined by the Garante for continuing to operate individual company accounts months after employment ended and for accessing messages without proper deletion. The authority also found inadequate information and insufficient access rights for former employees. | IT | Garante | GDPR | €20,000 | ↗ |
| 15 Dec 2022 | Assiteca S.p.A.Assiteca S.p.A. was fined EUR 120,000 by the Garante for violations related to the processing of personal data for marketing purposes. The authority also found inadequate responses to data subject requests. The case highlights the need for proper handling of individual rights and GDPR-compliant marketing practices. | IT | Garante | GDPR | €120,000 | ↗ |