Order report
BULLETIN №081Last updated · 28 Jul 2026

Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-20.7%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount↗
12 Apr 2018Emanuele CollaEmanuele Colla was fined by the Garante for activating seven phone cards without the consent of the person whose data was used. The case concerns a breach of data protection rules and the unauthorized use of personal data.ITGaranteGDPR€16,000↗
18 Apr 2018Futur3 s.r.l.Futur3 s.r.l. was fined EUR 50,000 by the Garante for requiring users to give mandatory consents for marketing and profiling purposes that were not directly related to the requested Wi‑Fi service. The authority found this to be a breach of data protection rules.ITGaranteGDPR€50,000↗
08 Jun 2023AziendaThe company was fined for failing to process personal data in a lawful, fair, and transparent manner. The authority also found breaches of data minimization and inadequate security measures.ITGaranteGDPR€5,000↗
12 May 2011Jnternet srlJnternet srl was fined by the Italian data protection authority, Garante, in the amount of EUR 10,000. The case concerned the failure to respond to requests for information about compliance with data protection obligations in connection with promotional emails sent without proper consent.ITGaranteGDPR€10,000↗
20 Dec 2012Regione Emilia RomagnaRegione Emilia Romagna was fined EUR 14,000 by the Garante for unlawfully disseminating personal data through the Regional Student Registry without a legal basis. The authority also found unauthorized retention of sensitive student data.ITGaranteGDPR€14,000↗
04 Apr 2013Stifter Josef KGStifter Josef KG was fined 2,400 EUR by the Garante. The company failed to provide the required data protection notice to customers when collecting personal data during online orders.ITGaranteGDPR€2,400↗
05 Mar 2015Antonianum s.r.l.Antonianum s.r.l. was fined EUR 8,000 by the Garante. The authority found that consent flags for data processing were pre-set on the company’s websites, which did not meet user consent requirements.ITGaranteGDPR€8,000↗
11 Jul 2018Comune di VollaComune di Volla was fined by the Garante EUR 10,000 for allowing all employees access to sensitive and judicial personal data through its electronic protocol system. The authority found that this setup failed to meet required data protection safeguards.ITGaranteGDPR€10,000↗
10 Oct 2013TeleTu s.p.a.TeleTu s.p.a. was fined 60,000 EUR by the Italian Garante. The sanction concerned unsolicited promotional phone calls made without the required consent of the data subject.ITGaranteGDPR€60,000↗
27 Jan 2021Dental Leader S.p.A.Dental Leader S.p.A. was fined EUR 10,000 by the Garante. The authority found that the company required consent to process personal data for promotional purposes in order to complete an online order, even though this was not necessary for contract performance.ITGaranteGDPR€10,000↗
28 Jul 2022Intesa Sanpaolo S.p.a.Intesa Sanpaolo S.p.a. was fined EUR 100,000 by Garante after an employee accessed a customer's financial data without authorization. The data was then used in judicial proceedings. The authority found that the bank had not implemented adequate data protection measures.ITGaranteGDPR€100,000↗
22 May 2014Tenacta Group s.p.a.Tenacta Group s.p.a. was fined €10,000 by the Garante for making an unsolicited promotional phone call. The conduct breached the complainant’s right to object, as recorded in the public opt-out list.ITGaranteGDPR€10,000↗
11 Oct 2012Casa di cura Eretenia S.p.a.The Garante fined Casa di cura Eretenia S.p.a. €30,000 for failing to provide proper data protection notices in its video surveillance system. The authority found a breach of privacy rules and the duty to inform individuals subject to monitoring.ITGaranteGDPR€30,000↗
05 Sept 2013Iniziative Commerciali S.r.l.Iniziative Commerciali S.r.l. was fined by the Garante for collecting personal data through a website contact form without providing the required privacy notice. This breached the Italian Data Protection Code.ITGaranteGDPR€4,800↗
02 Mar 2023Azienda sanitaria locale di BariAzienda sanitaria locale di Bari was fined EUR 50,000 by the Garante for violations in the processing of personal data. The authority found non-compliance with the principles of data minimization and integrity and confidentiality.ITGaranteGDPR€50,000↗
11 Sept 2014Happy Fit s.r.l.Happy Fit s.r.l. was fined by the Garante in the amount of EUR 16,400 for making an unsolicited promotional phone call. The company did not provide the required information or obtain consent, breaching data protection rules.ITGaranteGDPR€16,400↗
04 Jun 2025Comune di ReccoThe Garante fined Comune di Recco EUR 5,000 for inadequate data protection measures linked to video surveillance used to monitor waste disposal. The authority found breaches of the principles of lawfulness, fairness, and transparency.ITGaranteGDPR€5,000↗
19 Dec 2024Comune di LevantoThe Garante fined Comune di Levanto 4,000 EUR for data protection breaches linked to video surveillance systems. The authority found violations of the principles of lawfulness, fairness, transparency, and data minimization.ITGaranteGDPR€4,000↗
20 Mar 2008W.I. mind consulting s.r.l.W.I. mind consulting s.r.l. was fined by the Garante 6,000 EUR for sending unsolicited advertising by fax. The authority found that prior and adequate information required under Article 13 of the Italian Data Protection Code was not provided.ITGaranteGDPR€6,000↗
16 Jan 2025Comune di PaternòThe Garante fined Comune di Paternò EUR 6,000 for failing to communicate the Data Protection Officer’s contact details to the Authority. The breach concerned the obligation under Article 37(7) GDPR.ITGaranteGDPR€6,000↗