BULLETIN №081Last updated · 28 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -20.7%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 06 Feb 2014 | Arianna ContuArianna Contu was fined by the Garante for operating a video surveillance system in her bar without the required notices informing people of the monitoring. The case concerned non-compliance with privacy law signage obligations. | IT | Garante | GDPR | €2,400 | ↗ |
| 13 Apr 2023 | Unione PilotiUnione Piloti was fined by the Garante in the amount of 4,000 EUR for violations related to the processing of personal data. The authority found that the company failed to ensure lawful, fair, and transparent data handling. | IT | Garante | GDPR | €4,000 | ↗ |
| 04 Feb 2016 | Fondazione IRCCS Cà Granda, Ospedale Maggiore PoliclinicoFondazione IRCCS Cà Granda, Ospedale Maggiore Policlinico was fined by the Garante €10,000 for unlawful processing of personal data. The breach involved the incorrect delivery of documents containing health information of third parties. | IT | Garante | GDPR | €10,000 | ↗ |
| 05 Jun 2014 | Comune di GraffignanoComune di Graffignano was fined EUR 4,000 by the Garante. The authority found that personal data remained published on the institutional website for longer than the legally allowed 15 days. | IT | Garante | GDPR | €4,000 | ↗ |
| 29 May 2008 | impresa individuale Campodonico PierluigiThe sole proprietorship Campodonico Pierluigi was fined EUR 4,000 by the Garante. The sanction concerned sending unsolicited promotional messages by fax, in breach of data protection rules. | IT | Garante | GDPR | €4,000 | ↗ |
| 12 Feb 2026 | Conversion Media S.r.l.Conversion Media S.r.l. was fined EUR 10,000 by the Garante for failing to meet data protection obligations. The case concerned telemarketing activities in which required transparency and information duties toward data subjects were not fulfilled. | IT | Garante | GDPR | €10,000 | ↗ |
| 13 Apr 2023 | Arnia società cooperativaThe Garante imposed a fine of 800,000 EUR on Arnia società cooperativa for unauthorized data processing and telemarketing activities. The case concerned a breach of GDPR Article 5. | IT | Garante | GDPR | €800,000 | ↗ |
| 07 Apr 2022 | Tecnomed Trento s.r.l.Tecnomed Trento s.r.l. was fined by the Garante 10,000 EUR for operating a video surveillance system that did not comply with GDPR and the Italian Privacy Code. The authority found breaches of information duties and general data processing principles. | IT | Garante | GDPR | €10,000 | ↗ |
| 22 Feb 2024 | Azienda Usl Valle d’AostaThe Garante imposed a EUR 75,000 fine on Azienda Usl Valle d’Aosta for unauthorized access to patient health records. Healthcare professionals who were not involved in the patients’ care accessed the data, breaching GDPR data protection requirements. | IT | Garante | GDPR | €75,000 | ↗ |
| 12 Nov 2014 | Sergio FioreseSergio Fiorese was fined EUR 2,400 by the Garante for failing to provide data subjects with the required information about the processing of personal data. The breach concerned a video surveillance system at the association “Sottosopra”. | IT | Garante | GDPR | €2,400 | ↗ |
| 11 Dec 2008 | Centro di analisi e patologia clinica A. Agostini & L. Roussier Fusco & C. s.n.c.Centro di analisi e patologia clinica A. Agostini & L. Roussier Fusco & C. s.n.c. was fined for failing to notify the Garante of personal data processing activities within the required timeframe. The case concerned obligations under the Italian Data Protection Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 25 Jan 2012 | Porto 2000 società cooperativa a r. l.Porto 2000 società cooperativa a r. l. was fined EUR 30,000 by the Garante. The authority found that the company had not appointed data processing officers and had failed to implement minimum security measures for the video surveillance system at the Ancona tourist port. | IT | Garante | GDPR | €30,000 | ↗ |
| 15 Apr 2021 | Clear Channel Italia S.p.A.Clear Channel Italia S.p.A. was fined by the Garante EUR 75,000 for conducting intrusive checks on employees’ devices without a proper legal basis. The authority found breaches of data minimization and proportionality principles. | IT | Garante | GDPR | €75,000 | ↗ |
| 29 May 2008 | Zampetti PasqualinaZampetti Pasqualina was fined EUR 1,549 by the Garante for sending unsolicited emails. The case concerns a breach of data protection rules in connection with marketing communications sent without a valid legal basis. | IT | Garante | GDPR | €1,549 | ↗ |
| 12 Apr 2018 | ABC OROLOGERIA E TELEFONIA S.r.l.ABC OROLOGERIA E TELEFONIA S.r.l. was fined by the Garante in the amount of 60,000 EUR for activating SIM cards without the express consent of the individuals to whom the cards were registered. The case concerns a breach of data protection rules. | IT | Garante | GDPR | €60,000 | ↗ |
| 12 May 2016 | Auto 2000 s.p.a.Auto 2000 s.p.a. was fined by the Garante for collecting personal data through its website without providing users with the required information notice. The authority found this to be a breach of Article 13 of the Italian Data Protection Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 12 Oct 2016 | Lorenzo RiccitelliLorenzo Riccitelli was fined 16,000 EUR by the Italian data protection authority, Garante. The case concerned unsolicited emails and SMS messages used for electoral propaganda without the required information or consent from recipients. | IT | Garante | GDPR | €16,000 | ↗ |
| 22 Jul 2021 | Atac s.p.a.Atac s.p.a. was fined by the Garante 400,000 EUR for processing personal data without a specific legal basis and without adequate security measures. The case concerned users of paid parking services in Rome. | IT | Garante | GDPR | €400,000 | ↗ |
| 11 Jan 2023 | Azienda Sanitaria Locale di BrindisiAzienda Sanitaria Locale di Brindisi was fined by the Garante 2,500 EUR for failing to respond to a data access request. The authority found a breach of GDPR Article 15. | IT | Garante | GDPR | €2,500 | ↗ |
| 11 Mar 2021 | Mediacom s.r.l.Mediacom s.r.l. was fined by the Garante for making unsolicited promotional calls without proper consent. The authority found that this conduct breached GDPR rules on the processing of personal data for marketing purposes. | IT | Garante | GDPR | €15,000 | ↗ |