BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 04 May 2017 | McDonald’s Development ItalyMcDonald’s Development Italy was fined EUR 15,000 by the Garante. The authority found that the company retained surveillance footage longer than permitted under the video surveillance guidelines. | IT | Garante | GDPR | €15,000 | ↗ |
| 24 Nov 2016 | Unione Comunale del Chianti fiorentinoUnione Comunale del Chianti fiorentino was fined by the Garante 10,000 EUR for publishing on its website the personal data of individuals who were not admitted to a financial benefit. The conduct breached data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |
| 18 Dec 2025 | Comune di NaveComune di Nave was fined by the Garante for failing to ensure transparency in the processing of vehicle license plate data captured by surveillance cameras. The authority also found a breach of GDPR principles and the absence of a data protection impact assessment. | IT | Garante | GDPR | €6,000 | ↗ |
| 14 Sept 2006 | Asl FerraraAsl Ferrara was fined by the Garante for processing genetic, health, and sexual life data without the required notification. The authority found a breach of the Italian Privacy Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 24 Jan 2013 | Saverio ProcopioSaverio Procopio was fined €16,800 by the Garante for sending unsolicited promotional emails without obtaining explicit consent from recipients. The authority also found that the required privacy notice was not provided, in breach of the Italian Data Protection Code. | IT | Garante | GDPR | €16,800 | ↗ |
| 26 Feb 2026 | Radio Immagine Uno S.r.l.The Garante imposed a €10,000 fine on Radio Immagine Uno S.r.l. for failing to respond to a data subject's request to remove an online article containing personal data. The company did not comply with the right to be forgotten, resulting in a data protection breach. | IT | Garante | GDPR | €10,000 | ↗ |
| 10 Sept 2015 | Aurelia ZanniAurelia Zanni was fined EUR 2,400 by the Garante for failing to provide an adequate simplified privacy notice. The case concerned its “compro oro” business and non-compliance with the Italian Data Protection Code and the 2010 video surveillance guidelines. | IT | Garante | GDPR | €2,400 | ↗ |
| 05 Oct 2017 | Start S.p.A.Start S.p.A. was fined by the Garante 40,000 EUR for operating a geolocation system on its buses without full compliance with data protection rules. The case concerned location data processing without the required legal basis and safeguards. | IT | Garante | GDPR | €40,000 | ↗ |
| 01 Dec 2016 | Adda Gestioni Industriali e Mobiliari s.p.a.Adda Gestioni Industriali e Mobiliari S.p.a. was fined by the Garante 2,400 EUR for improper data processing through a video surveillance system. The authority found that adequate notices were not provided for external cameras monitoring the parking area. | IT | Garante | GDPR | €2,400 | ↗ |
| 10 Jul 2014 | Comune di OrbetelloThe Municipality of Orbetello was fined EUR 10,000 by the Italian data protection authority, Garante. The sanction concerned the publication of individuals’ personal health data on the municipality’s official website, in breach of privacy rules. | IT | Garante | GDPR | €10,000 | ↗ |
| 15 Feb 2018 | AUTONOLEGGI 24 S.a.s. DI GIAQUINTO GIOVANNIAUTONOLEGGI 24 S.a.s. was fined by the Garante for processing personal data through a geolocation system without the required notification. The case concerned breaches of notification and supervisory obligations linked to that processing. | IT | Garante | GDPR | €20,000 | ↗ |
| 08 Jul 2021 | Consiglio Regionale della Valle d’AostaConsiglio Regionale della Valle d’Aosta was fined EUR 1,000 by the Garante for failing to remove personal data from its website after a request. The authority found this to be a breach of data protection rights. | IT | Garante | GDPR | €1,000 | ↗ |
| 21 Dec 2023 | Gestioni Aziendali s.r.l.Gestioni Aziendali s.r.l. was fined by the Garante in the amount of 5,000 EUR for operating a video surveillance system at Hotel della Vittoria without appropriate informational signage. The authority found this to be a breach of GDPR transparency requirements toward monitored individuals. | IT | Garante | GDPR | €5,000 | ↗ |
| 12 Apr 2018 | Insurances Global Services S.r.l.Insurances Global Services S.r.l. was fined by the Garante EUR 20,000 for violations involving access to and handling of client data from credit risk databases without proper authorization. The case concerned the unauthorized use of personal data in the context of credit risk assessment. | IT | Garante | GDPR | €20,000 | ↗ |
| 10 Feb 2022 | Regione ToscanaRegione Toscana was fined by the Garante EUR 10,000 for failing to implement adequate security measures, which resulted in a data breach. The breach was mitigated by the region’s prompt response to reduce the negative effects on affected individuals. | IT | Garante | GDPR | €10,000 | ↗ |
| 25 Nov 2015 | Ente Parco dei NebrodiEnte Parco dei Nebrodi was fined EUR 8,000 by the Garante for processing employees’ biometric data without prior notification. The authority found a breach of Article 37 of the Codice Privacy. | IT | Garante | GDPR | €8,000 | ↗ |
| 19 Feb 2015 | Tecno Line S.r.l.Tecno Line S.r.l. was fined EUR 8,000 by the Italian data protection authority, Garante. The case concerned the activation of SIM cards in individuals’ names without their knowledge, which breached data protection rules. | IT | Garante | GDPR | €8,000 | ↗ |
| 06 Sept 2012 | BT Italia s.p.a.BT Italia s.p.a. was fined by the Garante EUR 75,000 for sending unsolicited promotional faxes without recipient consent. The conduct breached data protection and direct marketing rules. | IT | Garante | GDPR | €75,000 | ↗ |
| 07 Mar 2024 | BdM Banca S.p.a.BdM Banca S.p.a. was fined 10,000 EUR by the Garante for failing to provide an adequate response to a data access request submitted by an heir. The authority found that the response did not meet the requirements of GDPR Article 15. | IT | Garante | GDPR | €10,000 | ↗ |
| 27 Mar 2025 | Comune di PolinoComune di Polino was fined by the Garante for breaches of transparency and information obligations in data processing under GDPR Articles 6, 12, 13, and 14. The case concerned insufficient information provided to data subjects about how their personal data was processed. | IT | Garante | GDPR | €2,500 | ↗ |