Fine Tracker.

A public register of regulatory fines issued under EU compliance directives. Updated as decisions are published by national supervisory authorities.

5,273 entries

Total fines
€8.6bn
Decisions
5,273
Jurisdictions
33
Regulators
74
Avg monthly
€162.7m
YoY volume
-21.1%
Country
Type
Date range
ImposedCompanyCountryAuthorityTypeAmount
07 Mar 2024Giuliana VinziThe Garante fined Giuliana Vinzi, owner of Rocky Bar, 2,000 EUR for operating video surveillance without the required notices to data subjects. The authority also found that authorization from the Labor Inspectorate was missing, resulting in a GDPR breach.ITGaranteGDPR€2,000
24 Sept 2015Lo.Gi.Ma. s.r.lLo.Gi.Ma. s.r.l was fined 4,800 EUR by the Italian Garante. The company collected personal data through its website without providing the required privacy notice, in breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€4,800
15 Jan 2015Comune di PloagheComune di Ploaghe was fined by the Garante for unlawfully publishing personal data on its website beyond the legally permitted period. The authority found a breach of data protection rules.ITGaranteGDPR€4,000
04 Jul 2013Global ResearchGlobal Research was fined EUR 12,800 by the Garante for sending unsolicited promotional faxes without the required information and consent. The authority found this to be a breach of data protection rules.ITGaranteGDPR€12,800
07 May 2015Nappo Nicola JolandaNappo Nicola Jolanda was fined EUR 45,000 by the Garante for activating 37 phone cards in the names of 15 individuals without their knowledge. The conduct breached data protection rules.ITGaranteGDPR€45,000
19 Sept 2013Cooperativa di servizi AggregoCooperativa di servizi Aggrego was fined €6,400 by the Garante. The case concerned the sending of unsolicited promotional faxes without prior consent, in breach of data protection rules.ITGaranteGDPR€6,400
05 Mar 2015Comune di CapaccioComune di Capaccio was fined for unlawfully publishing sensitive personal data revealing health conditions on its institutional website. The authority found this to be a breach of privacy and data protection rules.ITGaranteGDPR€10,000
07 Feb 2013Edipro s.a.s.Edipro s.a.s. was fined by the Garante in the amount of EUR 100,000 for violations related to unsolicited telemarketing. The authority also cited the indiscriminate collection and communication of personal data.ITGaranteGDPR€100,000
09 Jun 2022Cribis Credit Management s.r.l.Cribis Credit Management s.r.l. was fined 10,000 EUR by the Garante. The authority found that the company unjustifiably communicated debtor information to third parties, in breach of GDPR Article 5.ITGaranteGDPR€10,000
18 Mar 2018Cristiano PanepintoCristiano Panepinto was fined €26,000 by the Garante for sending promotional emails without obtaining users’ free and specific consent. The conduct breached Article 130 of the Italian Privacy Code.ITGaranteGDPR€26,000
09 Dec 2010Bios s.p.a.Bios s.p.a. was fined by the Italian Garante for failing to provide adequate and timely information about the processing of personal data through a video surveillance system. The conduct breached Article 13 of the Italian Data Protection Code.ITGaranteGDPR€6,000
25 Jun 2015Azienda di Servizi per la persona "Carlo Pezzani" di VogheraThe company published the personal data of five guests on its website without a legal basis. This breached privacy rules and led to a fine imposed by the Garante.ITGaranteGDPR€4,000
15 Nov 2012Dusty s.r.l.Dusty s.r.l. was fined by the Italian Garante 66,000 EUR for implementing a biometric data collection system for employee attendance without properly appointing data processing officers and without obtaining the required consent. The authority found violations of several provisions of the data protection code.ITGaranteGDPR€66,000
12 Feb 2015Aloisio AngeloAloisio Angelo was fined EUR 25,000 by the Italian data protection authority, Garante. The case involved activating 15 phone cards in the names of 5 individuals without their knowledge, which breached data protection rules.ITGaranteGDPR€25,000
17 Dec 2015Caaf Cgil Sardegna srlCaaf Cgil Sardegna srl was fined by the Garante 12,000 EUR for failing to provide the required privacy notice on its website. The authority found this to be a breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€12,000
02 Dec 2021La Duomo S.r.l.s.La Duomo S.r.l.s. was fined EUR 20,000 by the Garante for sending unsolicited promotional SMS messages without valid consent. The authority found that the company’s conduct breached data protection rules.ITGaranteGDPR€20,000
20 Oct 2022Comune di Calvi RisortaThe Municipality of Comune di Calvi Risorta was fined 2,000 EUR by the Garante. The sanction resulted from a delayed response to the supervisory authority's request for information, which breached data protection rules.ITGaranteGDPR€2,000
29 Nov 2018Wind Tre S.p.A.Wind Tre S.p.A. was fined EUR 600,000 by the Garante for unsolicited promotional calls and SMS. The authority found breaches of several provisions of the Italian Data Protection Code.ITGaranteGDPR€600,000
10 Nov 2022Conservatorio di Musica S. Cecilia di RomaThe Conservatorio di Musica S. Cecilia di Roma was fined €6,000 by the Garante. The authority found unlawful processing of personal data contained in an audio/video recording used in disciplinary proceedings against a student without a lawful basis.ITGaranteGDPR€6,000
18 Sept 2014Blue Dream Hotel s.r.l.Blue Dream Hotel s.r.l. was fined EUR 2,400 by the Garante for processing personal data related to job applications without providing the required privacy notice. The authority found a breach of Article 13 of the Italian Data Protection Code.ITGaranteGDPR€2,400