BULLETIN №082Last updated · 30 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.2%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 12 Nov 2015 | A.S.D. Associazione di promozione culturale e sociale Social ClubA.S.D. Associazione di promozione culturale e sociale Social Club was fined EUR 2,400 by the Garante for publishing an inadequate privacy notice on its website. The authority found this to be a breach of Article 161 of the Italian Data Protection Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 12 Nov 2015 | Croce Rosa Italiana s.r.l.Croce Rosa Italiana s.r.l. was fined for processing employee personal data using electronic tools for geolocation without adopting minimum security measures. The authority found a breach of Article 33 of the Italian Data Protection Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 12 Nov 2015 | Giuseppina GhezziGiuseppina Ghezzi was fined by the Garante 26,000 EUR for registering 100 phone cards to an unaware third party. The required data protection information was not provided and consent was not obtained, constituting a breach of data protection law. | IT | Garante | GDPR | €26,000 | ↗ |
| 12 Nov 2015 | Cantiere 21 s.r.l.Cantiere 21 s.r.l. was fined by the Garante in the amount of 2,400 EUR for failing to provide adequate simplified information about its video surveillance system. The authority treated this as a breach of privacy rules. | IT | Garante | GDPR | €2,400 | ↗ |
| 12 Nov 2015 | Pasticceria Gelateria Bar D.D. & D. di Davide Busato & C. s.n.c.The company was fined by the Garante 2,400 EUR for operating a video surveillance system without providing the simplified information notice required under data protection law. The breach concerned the duty to inform individuals subject to monitoring. | IT | Garante | GDPR | €2,400 | ↗ |
| 12 Nov 2015 | Capodarco Società Cooperativa Sociale IntegrataCapodarco Società Cooperativa Sociale Integrata was fined EUR 12,000 by the Garante for recording and listening to calls between call center operators and users. The authority found that the required information notice was not provided to worker members, in breach of data protection rules. | IT | Garante | GDPR | €12,000 | ↗ |
| 18 Nov 2015 | G.M.C. - Giuseppe Marra Communications s.a.p.a.G.M.C. - Giuseppe Marra Communications s.a.p.a. was fined by the Garante in the amount of €4,000 for unlawfully obtaining consent for data processing through a newsletter subscription. The form included marketing purposes beyond the stated intent, which breached Article 23 of the Italian Data Protection Code. | IT | Garante | GDPR | €4,000 | ↗ |
| 18 Nov 2015 | Comune di RecaleComune di Recale was fined EUR 4,000 by the Garante for publishing an individual's personal data on its institutional website without proper legal basis. The case concerned violations of privacy and personal data processing rules. | IT | Garante | GDPR | €4,000 | ↗ |
| 18 Nov 2015 | Collegio professionale dei periti industriali di Roma e provinciaCollegio professionale dei periti industriali di Roma e provincia was fined 10,000 EUR by the Garante for unlawfully publishing judicial data on its website. The publication occurred during an election campaign. | IT | Garante | GDPR | €10,000 | ↗ |
| 18 Nov 2015 | 24 Media s.r.l.24 Media s.r.l. was fined EUR 4,000 by the Garante. The authority found that the company required mandatory consent for purposes beyond the original data collection intent, including promotional communications and sharing data with third parties. | IT | Garante | GDPR | €4,000 | ↗ |
| 18 Nov 2015 | Zsa Zsa srlZsa Zsa srl was fined EUR 2,400 by the Italian Garante. The violation concerned the failure to provide the required privacy notice on the website’s data collection form, in breach of the Italian data protection code. | IT | Garante | GDPR | €2,400 | ↗ |
| 24 Nov 2015 | VACACIONES EDREAMS SOCIEDAD LIMITADA UNIPERSONALVACACIONES EDREAMS SOCIEDAD LIMITADA UNIPERSONAL was fined by the AEPD EUR 20,000 for sending unsolicited commercial communications by email. The conduct breached Article 21.1 of the LSSI and constituted unlawful marketing communication. | ES | AEPD | ePrivacy | €20,000 | ↗ |
| 25 Nov 2015 | Video s.r.l.Video s.r.l. was fined by the Garante 25,000 EUR for registering 500 phone cards to five unaware individuals without their consent. The case concerns a breach of data protection rules and the absence of a lawful basis for processing personal data. | IT | Garante | GDPR | €25,000 | ↗ |
| 25 Nov 2015 | Ente Parco dei NebrodiEnte Parco dei Nebrodi was fined EUR 8,000 by the Garante for processing employees’ biometric data without prior notification. The authority found a breach of Article 37 of the Codice Privacy. | IT | Garante | GDPR | €8,000 | ↗ |
| 25 Nov 2015 | Massimo GeraciMassimo Geraci was fined by the Garante for failing to provide adequate simplified information about the use of a video surveillance system. The authority found a breach of data protection requirements. | IT | Garante | GDPR | €2,400 | ↗ |
| 02 Dec 2015 | Sea srlSea srl was fined EUR 2,400 by the Italian Garante. The case concerned the installation of a video surveillance system without providing the required privacy notice, in breach of Article 13 of the Italian Privacy Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 02 Dec 2015 | A.M.A.M. Azienda Meridionale Acque Messina s.p.a.A.M.A.M. Azienda Meridionale Acque Messina s.p.a. was fined by the Garante for processing employees' biometric data without notification and without requesting prior verification. The authority found that the company breached data protection rules. | IT | Garante | GDPR | €34,000 | ↗ |
| 10 Dec 2015 | Nuovo Pic Nic s.r.l.Nuovo Pic Nic s.r.l. was fined 2,400 EUR by the Garante for failing to provide adequate simplified information about its video surveillance system. The authority treated this as a breach of data protection rules. | IT | Garante | GDPR | €2,400 | ↗ |
| 10 Dec 2015 | Aruba s.p.a.Aruba s.p.a. was fined by the Italian data protection authority, Garante, in the amount of EUR 40,000. The case concerned the sending of promotional emails without obtaining the required consent, in breach of articles 23 and 130 of the Italian data protection code. | IT | Garante | GDPR | €40,000 | ↗ |
| 11 Dec 2015 | EAE INSTITUCION SUPERIOR DE FORMACION UNIVERSITARIA S.L.EAE INSTITUCION SUPERIOR DE FORMACION UNIVERSITARIA S.L. was fined by the AEPD EUR 3,000 for sending commercial emails without the required consent. The authority found this conduct breached Article 21.2 of the LSSI. | ES | AEPD | ePrivacy | €3,000 | ↗ |