BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 06 Jul 2006 | Pricewaterhouse Cooper Executive Search & SelectionPricewaterhouse Cooper Executive Search & Selection was fined 258 EUR by the Italian Garante. The case concerned inadequate information provided to candidates about the processing of their personal data in job advertisements, in breach of Art. 13 of the Codice Privacy. | IT | Garante | GDPR | €258 | ↗ |
| 29 Jan 2015 | Comune di BarzagoComune di Barzago was fined for failing to provide the required information notice to individuals whose personal data were processed for sending informational SMS messages. The authority found a breach of Article 13 of the Italian Privacy Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 09 Nov 2017 | Consorzio di Polizia locale Valle AgnoConsorzio di Polizia locale Valle Agno was fined EUR 10,400 by the Garante for deploying a mobile video surveillance system and a localization system on employee devices without the required information or prior notification. The authority found this to be a breach of data protection rules. | IT | Garante | GDPR | €10,400 | ↗ |
| 01 Jun 2016 | Midica s.r.l.Midica s.r.l. was fined by the Garante for making promotional calls without the consent of the individuals concerned. The company also failed to respond to information requests from the supervisory authority. | IT | Garante | GDPR | €10,000 | ↗ |
| 26 Jul 2018 | Primo s.r.l.Primo s.r.l., a dental center, was fined by the Italian Garante in the amount of 10,000 EUR. The authority found inadequate security measures in the processing of patients’ personal data. | IT | Garante | GDPR | €10,000 | ↗ |
| 23 Mar 2023 | Comune di PulsanoComune di Pulsano was fined by the Garante for unlawfully publishing personal data related to an employee’s disciplinary proceedings on its institutional website. The authority found breaches of data minimization and transparency principles. | IT | Garante | GDPR | €3,000 | ↗ |
| 10 Apr 2025 | Yolo Group S.p.a.Yolo Group S.p.a. was fined by the Garante 30,000 EUR for a data breach involving personal and contact data of a large number of individuals. The authority found a violation of Article 33 of the GDPR, which concerns notification of personal data breaches. | IT | Garante | GDPR | €30,000 | ↗ |
| 26 Apr 2018 | Falotico Luca CarmeloFalotico Luca Carmelo, a general practitioner, was fined for failing to implement minimum security measures to protect personal and sensitive data. This allowed unauthorized access to the healthcare system. | IT | Garante | GDPR | €10,000 | ↗ |
| 28 May 2015 | People & Comunication s.r.l.People & Comunication s.r.l. was fined EUR 20,000 by the Garante. The authority found that the company retained telephone traffic data for more than 24 months, in breach of Article 132 of the Italian Data Protection Code. | IT | Garante | GDPR | €20,000 | ↗ |
| 03 Feb 2011 | Il Filo s.r.l.Il Filo s.r.l. was fined by the Garante in the amount of €6,000 for processing personal data without providing the required information notice to data subjects. The breach concerned Article 13 of the Italian Data Protection Code. | IT | Garante | GDPR | €6,000 | ↗ |
| 11 Jul 2018 | BUSITALIA VENETO S.p.A.BUSITALIA VENETO S.p.A. was fined by the Garante for unlawful processing of personal data through the installation of a geolocation system on its public transport vehicles. The measure infringed employee privacy and data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |
| 02 Oct 2014 | San Petronio s.r.l.San Petronio s.r.l. was fined by the Garante for failing to appoint data processing officers and for providing inadequate information about video surveillance. The authority found that these practices breached data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |
| 10 Oct 2013 | Antonio CastielloAntonio Castiello was fined for failing to provide the required privacy notice in relation to a video surveillance system at his gaming establishment. The authority found that the omission breached the information duties owed to individuals captured by the cameras. | IT | Garante | GDPR | €2,400 | ↗ |
| 11 Apr 2013 | Diners Club Italia s.r.l.Diners Club Italia s.r.l. was fined €40,000 by the Garante for breaches of data protection rules. The authority found that the company failed to designate data processing officers and did not update the security program document. | IT | Garante | GDPR | €40,000 | ↗ |
| 22 Jun 2016 | Autoverde 07 s.r.l.Autoverde 07 s.r.l. was fined by the Garante in the amount of 2,400 EUR for processing customers’ personal data through its website without providing adequate information. The authority found this to be a breach of data protection rules. | IT | Garante | GDPR | €2,400 | ↗ |
| 04 Dec 2025 | Comune di TuscaniaThe Garante fined Comune di Tuscania 12,000 EUR for failing to provide timely and complete responses to information requests. It also found breaches of lawfulness, fairness, and transparency, as well as inadequate data protection impact assessments for video surveillance. | IT | Garante | GDPR | €12,000 | ↗ |
| 22 Feb 2018 | Bar La Piazzetta s.a.s.Bar La Piazzetta s.a.s. was fined EUR 46,000 by the Italian Garante. The authority found that surveillance footage was kept longer than permitted, access was not password-protected, and the required privacy notices were not provided. | IT | Garante | GDPR | €46,000 | ↗ |
| 11 Oct 2012 | Professional Pneus sccrlProfessional Pneus sccrl was fined EUR 10,400 by the Garante. The authority found that personal data were processed without giving users the option to refuse consent for marketing purposes, breaching transparency requirements. | IT | Garante | GDPR | €10,400 | ↗ |
| 30 Mar 2017 | Grand Hotel Des Bains s.r.l.Grand Hotel Des Bains s.r.l. was fined by the Garante 12,000 EUR for retaining surveillance footage longer than permitted under the video surveillance guidelines. The case concerns a breach of data retention rules for CCTV recordings. | IT | Garante | GDPR | €12,000 | ↗ |
| 20 Mar 2008 | PromofaxPromofax was fined by the Italian authority Garante in the amount of EUR 3,000. The case concerned sending advertising material by fax without providing recipients with prior and adequate information, in breach of data protection rules. | IT | Garante | GDPR | €3,000 | ↗ |