BULLETIN №082Last updated · 31 Jul 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 11 Mar 2021 | Azienda Ospedaliera San Giovanni AddolorataAzienda Ospedaliera San Giovanni Addolorata was fined EUR 20,000 by the Garante for inadequate data protection measures concerning patient health data. The authority found breaches of GDPR Articles 5 and 32. | IT | Garante | GDPR | €20,000 | ↗ |
| 01 Mar 2018 | Massimo FarinaMassimo Farina was fined EUR 280,000 by the Garante. The case concerned the use of prepaid credit cards under false names without obtaining consent, which breached data protection rules. | IT | Garante | GDPR | €280,000 | ↗ |
| 17 May 2023 | Azienda ULSS 6 EuganeaThe Garante fined Azienda ULSS 6 Euganea 10,000 EUR for the incorrect handling of health-related documents. The authority found breaches of GDPR Articles 5, 6, and 32. | IT | Garante | GDPR | €10,000 | ↗ |
| 14 Sept 2006 | Asl VercelliAsl Vercelli was fined by the Garante for processing special-category personal data, including genetic and health data, without the required notification. The authority found this to be a breach of the Italian Data Protection Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 04 Dec 2025 | Liceo scientifico e linguistico statale “Principe Umberto di Savoia”Liceo scientifico e linguistico statale “Principe Umberto di Savoia” was fined EUR 1,000 by the Garante for breaching the principles of lawfulness, fairness, and transparency in data processing. The authority also found that the school failed to provide adequate information to data subjects. | IT | Garante | GDPR | €1,000 | ↗ |
| 23 Jul 2015 | Filippo Spada e c. sasFilippo Spada e c. sas was fined by the Italian supervisory authority Garante in the amount of €2,400. The sanction was imposed for failing to provide the required privacy notice on its website, in breach of the Italian Data Protection Code. | IT | Garante | GDPR | €2,400 | ↗ |
| 11 Feb 2021 | Arma dei carabinieriArma dei carabinieri was fined by the Garante for improperly handling sensitive and judicial data without adequate safeguards against unauthorized access. The authority found breaches of the GDPR and the Italian Privacy Code. | IT | Garante | GDPR | €10,000 | ↗ |
| 12 Nov 2020 | Vodafone Italia S.p.A.Vodafone Italia S.p.A. was fined by the Garante 12,251,601 EUR for making unauthorized promotional calls and sending messages. The authority also found that effective measures to ensure data processing security and GDPR compliance were not in place. | IT | Garante | GDPR | €12,251,000 | ↗ |
| 16 Apr 2015 | Web performance s.r.l.Web performance s.r.l. was fined by the Garante for collecting personal data through website forms without proper consent. The authority found this to be a breach of data protection rules. | IT | Garante | GDPR | €10,000 | ↗ |
| 31 Jan 2019 | Comune di BardolinoThe Municipality of Bardolino was fined EUR 8,000 by the Garante for publishing personal data on its institutional website without an appropriate legal basis. The disclosure included names and tax codes of beneficiaries of economic contributions, as well as personal information of two municipal employees. | IT | Garante | GDPR | €8,000 | ↗ |
| 10 Jul 2025 | Comune di LanghiranoThe Municipality of Langhirano was fined by the Garante for the unauthorized disclosure of personal data on its institutional website. The data was removed, but the authority imposed a monetary penalty of EUR 12,000. | IT | Garante | GDPR | €12,000 | ↗ |
| 07 May 2015 | Patru Dumitra DanielaPatru Dumitra Daniela was fined by the Garante in the amount of EUR 2,400 for operating a video surveillance system at the bar “New Liberty” without providing adequate simplified information. The authority treated this as a breach of privacy rules. | IT | Garante | GDPR | €2,400 | ↗ |
| 10 Apr 2014 | sig. Jin BangshengThe legal representative of Grande Riccone srl was fined EUR 4,800 by the Garante. The sanction concerned operating a video surveillance system without the required data protection notice, in breach of Article 13 of the Italian Data Protection Code. | IT | Garante | GDPR | €4,800 | ↗ |
| 13 Nov 2024 | Spinacqua S.r.l.Spinacqua S.r.l. was fined by the Garante €10,000 for making unsolicited promotional calls to a number listed in the Public Opposition Register. The company did not obtain consent and failed to verify the number’s registration status before contacting it. | IT | Garante | GDPR | €10,000 | ↗ |
| 26 Jun 2014 | Omnia energia s.p.a.Omnia energia s.p.a. was fined EUR 8,400 by the Garante for failing to provide adequate simplified information about its video surveillance system. The authority also found that required information was not provided on the company’s website, in breach of data protection rules. | IT | Garante | GDPR | €8,400 | ↗ |
| 29 Apr 2025 | Ordine degli Psicologi della Regione LombardiaThe Garante fined the Ordine degli Psicologi della Regione Lombardia EUR 30,000 for a data breach. The incident exposed personal and sensitive data of about 15,000 individuals, including information covered by professional secrecy and special categories of data. | IT | Garante | GDPR | €30,000 | ↗ |
| 12 Sept 2024 | Provvedimento del 12 settembre 2024 [10065894]The Garante imposed a EUR 400 fine for the improper installation of surveillance cameras oriented toward private residences. The conduct breached privacy and personal data protection rules. | IT | Garante | GDPR | €400 | ↗ |
| 10 Jul 2025 | Asilo nido “La Combricola Dei Birichini Di Betty”The Garante imposed a 10,000 EUR fine on the nursery for failing to provide parents with the required information about the processing of children's images. It also found that no data protection impact assessment had been carried out for the surveillance system. | IT | Garante | GDPR | €10,000 | ↗ |
| 06 Oct 2016 | Comune di FurnariComune di Furnari was fined for publishing personal data on its institutional website. It also failed to respond to information requests from the Garante. | IT | Garante | GDPR | €4,000 | ↗ |
| 02 Dec 2015 | A.M.A.M. Azienda Meridionale Acque Messina s.p.a.A.M.A.M. Azienda Meridionale Acque Messina s.p.a. was fined by the Garante for processing employees' biometric data without notification and without requesting prior verification. The authority found that the company breached data protection rules. | IT | Garante | GDPR | €34,000 | ↗ |