BULLETIN №082Last updated · 01 Aug 2026
Fine Tracker.
A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.
5,273 entries
- Total fines
- €8.6bn
- Decisions
- 5,273
- Jurisdictions
- 33
- Regulators
- 74
- Avg monthly
- €162.7m
- YoY volume
- -21.4%
| Imposed | Company | Country | Authority | Type | Amount | ↗ |
|---|---|---|---|---|---|---|
| 12 Dec 2024 | Ambiente 2000 S.r.l.Ambiente 2000 S.r.l. was fined EUR 20,000 by the Garante. The authority found that the company required employees to disclose passwords to their work email and files containing personal data, in breach of the GDPR. | IT | Garante | GDPR | €20,000 | ↗ |
| 21 Mar 2024 | Regione LazioThe Garante fined Regione Lazio EUR 120,000 for inadequate security measures that led to attempted unauthorized access to user accounts. The authority found a breach of GDPR requirements on data protection and processing security. | IT | Garante | GDPR | €120,000 | ↗ |
| 30 Jun 2011 | Porto di Tropea s.p.a.Porto di Tropea s.p.a. was fined by the Garante 10,000 EUR for failing to provide adequate information about video surveillance. The authority also found that data processors were not formally appointed for customer data collected through mooring contracts. | IT | Garante | GDPR | €10,000 | ↗ |
| 04 Apr 2019 | Ordinanza ingiunzione - 4 aprile 2019 [9117119]A municipal councillor was fined by the Garante for unlawfully disclosing personal data obtained from a document without legal justification. The authority found a breach of the principles of lawful processing and data protection. | IT | Garante | GDPR | €4,000 | ↗ |
| 10 Apr 2025 | Aliseo s.r.l.Aliseo s.r.l. was fined by the Garante for operating a video surveillance system without proper notice and for monitoring employees, including audio recording. The authority found the monitoring disproportionate to the stated security purpose. | IT | Garante | GDPR | €5,000 | ↗ |
| 09 Oct 2014 | Comune di UdineThe Municipality of Udine was fined 14,000 EUR by the Garante. The authority found that the Security Policy Document (DPS) had not been updated from 2005 to 2011, which breached data protection rules. | IT | Garante | GDPR | €14,000 | ↗ |
| 25 Feb 2016 | Associazione sportivo dilettantistica Feriolo Sporting ClubFeriolo Sporting Club was fined by the Garante 14,400 EUR for failing to provide adequate simplified information about its video surveillance system. The authority also found that recorded images were retained longer than permitted. | IT | Garante | GDPR | €14,400 | ↗ |
| 02 Apr 2015 | Ales Groupe Italia S.p.A.Ales Groupe Italia S.p.A. was fined EUR 20,000 by the Garante for violations related to data processing on its website. Users were asked to provide personal data without proper consent mechanisms. | IT | Garante | GDPR | €20,000 | ↗ |
| 12 Oct 2023 | S.T.A. Società Trattamento Acque s.r.l.S.T.A. Società Trattamento Acque s.r.l. was fined €75,000 by the Garante. The authority found a breach of Article 15 GDPR after the company failed to respond to an employee's request for access to professional training records. | IT | Garante | GDPR | €75,000 | ↗ |
| 27 Nov 2024 | Faro di RomaFaro di Roma was fined 15,000 EUR by the Garante for failing to comply with data protection rules. The case concerned the failure to honor requests for erasure and rectification of personal data linked to a judicial matter. | IT | Garante | GDPR | €15,000 | ↗ |
| 22 May 2018 | Parnofiello AntonellaParnofiello Antonella, a general practitioner, was fined for failing to implement minimum security measures to protect personal and sensitive data. This allowed unauthorized access to a healthcare system. | IT | Garante | GDPR | €10,000 | ↗ |
| 06 Jul 2006 | Selework s.a.s.Selework s.a.s. was fined EUR 258 by the Garante for failing to provide candidates with adequate information about the processing of their personal data in job advertisements. The authority found a breach of Article 13 of the Codice Privacy. | IT | Garante | GDPR | €258 | ↗ |
| 26 Feb 2026 | Depac Società Cooperativa Sociale a r.l.Depac Società Cooperativa Sociale a r.l. was fined by the Garante EUR 15,000 for unauthorized processing of employees' biometric data. The case concerned the collection and storage of fingerprint data without proper consent or a valid legal basis. | IT | Garante | GDPR | €15,000 | ↗ |
| 18 Jul 2023 | Provvedimento del 18 luglio 2023 [9935503]A complaint was filed with the Garante concerning a surveillance system installed by an individual that may have captured footage of a public street. The authority found a GDPR breach and imposed a fine of EUR 400. | IT | Garante | GDPR | €400 | ↗ |
| 06 Jul 2006 | Korallina Tours s.r.l.Korallina Tours s.r.l. was fined EUR 2,582 by the Garante for sending unsolicited promotional emails. The case concerns a breach of data protection obligations, including the duty to provide information to the authority under applicable law. | IT | Garante | GDPR | €2,582 | ↗ |
| 15 Dec 2022 | Comune di BraccianoComune di Bracciano was fined EUR 6,000 by the Garante for violations related to the processing of personal data. The case involved failures to comply with data protection principles and improper legal bases for processing. | IT | Garante | GDPR | €6,000 | ↗ |
| 11 Jun 2015 | Quotidiano Il Tempo s.r.l.Quotidiano Il Tempo s.r.l. was fined by the Garante EUR 8,400 for processing personal data without providing adequate information to subscribers. The authority also found that the company used a video surveillance system without the simplified notice required under privacy rules. | IT | Garante | GDPR | €8,400 | ↗ |
| 08 May 2014 | Telextra s.r.l.Telextra s.r.l. was fined by the Garante for processing personal data from electronic communication operators' databases without consent. The authority also found non-compliance with previous orders and data protection requirements. | IT | Garante | GDPR | €300,000 | ↗ |
| 09 May 2018 | Ditta individuale “La Scuola della Salute di Francesco Parisi”The Garante imposed a 15,000 EUR fine on Ditta individuale “La Scuola della Salute di Francesco Parisi” for providing inadequate privacy information to clients and for related consent issues. The conduct was found to violate provisions of the privacy code. | IT | Garante | GDPR | €15,000 | ↗ |
| 27 Apr 2023 | Provvedimento del 27 aprile 2023 [9896468]A fine of EUR 400 was imposed for improper use of a video surveillance system that captured images of a public street without the required authorization. The case concerned a breach of personal data processing rules in the context of video monitoring. | IT | Garante | GDPR | €400 | ↗ |