BULLETIN №083Last updated · 08 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.5m
- YoY volume
- -23.6%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 05 Jun 2014 | Comune di TerniThe Garante fined Comune di Terni €4,000 for publishing personal data on its website for longer than the legally permitted 15 days. The authority found this to be a breach of data protection rules. | IT | Garante | GDPR | €4,000 | ↗ |
| 28 Apr 2022 | Comune di TarantoComune di Taranto was fined by the Garante in the amount of EUR 20,000 for violations related to the installation of surveillance cameras without proper data protection measures. The authority found a lack of transparency and a failure to provide the required information to data subjects. | IT | Garante | GDPR | €20,000 | ↗ |
| 12 Mar 2026 | Comune di SutriComune di Sutri was fined EUR 2,000 by the Garante for publishing personal data on its institutional website. The case concerns a breach of data protection rules in the public online disclosure of information. | IT | Garante | GDPR | €2,000 | ↗ |
| 04 Dec 2014 | Comune di SparaniseComune di Sparanise was fined for unlawfully publishing personal data, including IBAN and bank account details, on its institutional website without a legal basis. The authority found this to be a breach of data protection rules. | IT | Garante | GDPR | €8,000 | ↗ |
| 26 Mar 2015 | Comune di SortinoComune di Sortino was fined for unlawfully publishing personal data revealing health information on its institutional website. The case concerned a breach of data protection rules and the improper disclosure of sensitive data. | IT | Garante | GDPR | €10,000 | ↗ |
| 11 Jan 2024 | Comune di SiracusaThe Garante fined Comune di Siracusa €5,000 for breaches of data protection obligations under Article 37 GDPR. The case concerned failures related to the appointment and management of the data protection officer requirement. | IT | Garante | GDPR | €5,000 | ↗ |
| 15 Jan 2015 | Comune di SidernoComune di Siderno was fined by the Garante for unlawfully publishing personal data revealing health conditions on its website. The conduct breached privacy and data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |
| 27 Feb 2025 | Comune di SciaccaThe Garante fined Comune di Sciacca EUR 2,500 for violations related to the processing of personal data. The case concerned the communication of data to third parties without a proper legal basis. | IT | Garante | GDPR | €2,500 | ↗ |
| 28 May 2026 | Comune di SciaccaComune di Sciacca was fined EUR 6,000 by the Garante for violations related to the processing and dissemination of personal data in the public sector. The case concerned improper handling of personal data within public administration activities. | IT | Garante | GDPR | €6,000 | ↗ |
| 17 Dec 2020 | Comune di Santo Stefano BelboComune di Santo Stefano Belbo was fined for unlawfully disclosing personal data, including names and legal information, on its website without a proper legal basis. The case concerned the publication of data that should not have been made publicly available. | IT | Garante | GDPR | €4,000 | ↗ |
| 26 Mar 2015 | Comune di Santa NinfaComune di Santa Ninfa was fined EUR 4,000 by the Garante for unlawfully publishing personal data on its institutional website. The data remained available for longer than the legally permitted 15 days, constituting a data protection breach. | IT | Garante | GDPR | €4,000 | ↗ |
| 29 Apr 2021 | Comune di Santa NinfaComune di Santa Ninfa was fined by the Garante 2,000 EUR for publishing a complainant’s personal data online. The publication also included detailed references to enforcement proceedings, which breached GDPR requirements. | IT | Garante | GDPR | €2,000 | ↗ |
| 10 Nov 2016 | Comune di Sant'AgnelloComune di Sant'Agnello was fined EUR 4,000 by the Garante. The authority found that personal data of children had been published on the municipality's website, in breach of privacy rules. | IT | Garante | GDPR | €4,000 | ↗ |
| 14 Jan 2016 | Comune di Santa FlaviaThe Garante fined Comune di Santa Flavia €10,000 for unlawfully publishing documents on its website that disclosed individuals' health data. The case involved the disclosure of sensitive personal data without a lawful basis. | IT | Garante | GDPR | €10,000 | ↗ |
| 14 Sept 2023 | Comune di San SeveroThe Municipality of San Severo was fined EUR 10,000 by the Garante for publishing employees’ personal data, including names and productivity bonuses, on its institutional website. The authority found breaches of lawfulness, fairness, transparency, and data minimization principles. | IT | Garante | GDPR | €10,000 | ↗ |
| 01 Mar 2018 | Comune di San Mango PiemonteComune di San Mango Piemonte was fined for unlawfully using a biometric system based on fingerprint processing to record employee attendance. The authority found that this processing breached data protection rules. | IT | Garante | GDPR | €30,000 | ↗ |
| 28 Jul 2016 | Comune di San Lorenzo NuovoComune di San Lorenzo Nuovo was fined EUR 4,000 by the Garante for unlawfully publishing the list of court jurors online for longer than legally permitted. This resulted in unauthorized disclosure of personal data. | IT | Garante | GDPR | €4,000 | ↗ |
| 05 Feb 2015 | Comune di San Giuseppe JatoComune di San Giuseppe Jato was fined by the Garante for unlawfully publishing sensitive personal data revealing health status on its website. The conduct breached privacy rules governing the processing and disclosure of sensitive data. | IT | Garante | GDPR | €10,000 | ↗ |
| 05 Mar 2020 | Comune di San Giorgio JonicoComune di San Giorgio Jonico was fined by the Garante for publishing personal data on its institutional website. The authority found breaches of lawfulness, fairness, transparency, and data minimization principles. | IT | Garante | GDPR | €3,000 | ↗ |
| 18 Apr 2018 | Comune di San GeminiComune di San Gemini was fined EUR 10,000 by the Garante for unlawfully transmitting personal data of residents born in 1994–1996 to a school. The conduct breached data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |