BULLETIN №082Last updated · 30 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.2%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 21 Feb 2013 | Forum Media Edizioni s.r.l.Forum Media Edizioni s.r.l. was fined by the Italian Garante in the amount of €6,400. The case concerned the sending of unsolicited promotional faxes without the required information and without obtaining consent, in breach of Articles 13 and 130 of the Italian Data Protection Code. | IT | Garante | GDPR | €6,400 | ↗ |
| 24 Jun 2021 | Comune di FiscianoComune di Fisciano was fined EUR 1,000 by the Garante for improper handling of personal data. The data were removed after the complaint, and the case concerned transparency and data protection obligations. | IT | Garante | GDPR | €1,000 | ↗ |
| 28 Oct 2021 | Società LARCSocietà LARC was fined EUR 8,000 by the Garante for violations related to the processing of health data. The authority found non-compliance with GDPR requirements in the handling of these data. | IT | Garante | GDPR | €8,000 | ↗ |
| 18 Dec 2025 | Elba Catering Distribuzioni s.r.l.s.Elba Catering Distribuzioni s.r.l.s. was fined EUR 2,000 by the Garante for installing a video surveillance system that primarily captured public streets. The authority found that this processing breached data protection rules. | IT | Garante | GDPR | €2,000 | ↗ |
| 24 Nov 2011 | Gema s.p.a.Gema s.p.a. was fined by the Italian data protection authority, Garante, for failing to provide the required data protection information to users and entities through its website. The authority also found that the company used a video surveillance system without proper notification, in breach of the Italian Data Protection Code. | IT | Garante | GDPR | €22,000 | ↗ |
| 16 Dec 2009 | BonassisaLab s.r.l.BonassisaLab s.r.l. was fined by the Garante for failing to notify personal data processing activities. The breach concerned requirements under the Italian Data Protection Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 11 Sept 2014 | Villa dei Cedri s.p.a.Villa dei Cedri s.p.a. was fined by the Garante 2,400 EUR for failing to provide simplified information on the use of video surveillance systems. The authority found this to be a breach of privacy rules. | IT | Garante | GDPR | €2,400 | ↗ |
| 18 Jun 2015 | Wind Telecomunicazioni SpaWind Telecomunicazioni Spa was fined EUR 130,000 by the Garante. The case concerned the unlawful disclosure of mobile phone numbers in the White Pages directory without proper consent. | IT | Garante | GDPR | €130,000 | ↗ |
| 21 Jan 2010 | Servizi sanitari s.r.l. – Istituto cardiovascolare CamogliServizi sanitari s.r.l. was fined by the Garante 10,000 EUR for violations related to the processing of personal data without the required notification. The case concerned obligations under the Italian Data Protection Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 29 Jan 2026 | dott. Paolo MontemurroDott. Paolo Montemurro was fined 5,000 EUR by the Garante for posting photographs of a patient's surgical procedure on Instagram without consent. The authority found this breached GDPR principles of lawfulness, fairness, and transparency. | IT | Garante | GDPR | €5,000 | ↗ |
| 21 Sept 2017 | Tra.n.sider S.p.A.Tra.n.sider S.p.A. was fined EUR 20,000 by the Italian Garante. The case concerned the failure to notify the installation of a geolocation system on company vehicles, breaching data protection notification requirements. | IT | Garante | GDPR | €20,000 | ↗ |
| 12 Nov 2015 | A.S.D. Associazione di promozione culturale e sociale Social ClubA.S.D. Associazione di promozione culturale e sociale Social Club was fined EUR 2,400 by the Garante for publishing an inadequate privacy notice on its website. The authority found this to be a breach of Article 161 of the Italian Data Protection Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 28 Nov 2013 | Axa società cooperativa a responsabilità limitataAxa società cooperativa a responsabilità limitata was fined by the Garante 46,000 EUR for using biometric systems to monitor employee attendance and working hours. The authority found that the processing took place without proper consent and required notifications, in breach of data protection rules. | IT | Garante | GDPR | €46,000 | ↗ |
| 10 Apr 2025 | Ente di Patrocinio ed Assistenza per i Cittadini e l’Agricoltura (EPACA)EPACA was fined EUR 5,000 by the Italian Garante. The authority found that the organization retained personal data beyond the legally permitted period and accessed the INPS database without a valid mandate. | IT | Garante | GDPR | €5,000 | ↗ |
| 16 Dec 2009 | Campolongo Hospital s.p.a.Campolongo Hospital s.p.a. was fined by the Garante in the amount of 20,000 EUR. The case concerned the processing of personal data without the required notification under the Italian Data Protection Code. | IT | Garante | GDPR | €20,000 | ↗ |
| 02 Dec 2021 | Casa di cura Fondazione Gaetano e Piera Borghi s.r.l.The Garante imposed a EUR 30,000 fine on Casa di cura Fondazione Gaetano e Piera Borghi s.r.l. for inadequate data protection measures. The authority found insufficient password security and no HTTPS protocol, affecting patient health data. | IT | Garante | GDPR | €30,000 | ↗ |
| 08 Jul 2021 | Azienda ospedaliero-universitaria SeneseAzienda ospedaliero-universitaria Senese was fined by the Garante 25,000 EUR for violations related to data breaches involving health data and patient information. The case concerned the handling of sensitive data and required assessment of compliance with data protection obligations. | IT | Garante | GDPR | €25,000 | ↗ |
| 12 Sept 2013 | Cheng LiangxiaoCheng Liangxiao was fined by the Italian Garante for failing to provide the required privacy notice for a surveillance camera at his commercial premises. The breach concerned the absence of information on personal data processing for individuals captured by the camera. | IT | Garante | GDPR | €2,400 | ↗ |
| 08 May 2014 | Domenico Ciano AlbaneseDomenico Ciano Albanese was fined 4,800 EUR by the Garante for collecting personal data without providing adequate information to the data subjects. The authority found a breach of Article 13 of the Italian Data Protection Code. | IT | Garante | GDPR | €4,800 | ↗ |
| 12 May 2016 | Leonardo SestaLeonardo Sesta, a lawyer, was fined by the Italian data protection authority, Garante. The violation concerned transmitting personal data by email instead of registered mail, contrary to data protection rules. | IT | Garante | GDPR | €4,000 | ↗ |