CA Autobank S.p.A. – €1,000,000 Fine (Italy, 2024)

€1,000,000Garante per la protezione dei dati personali6 June 2024Italy
final
ePrivacy
Fine

CA Autobank S.p.A. was fined 1 million euros for placing cookies on users' devices before getting their consent. This case is important because it shows that companies must ask for permission before tracking users online.

What happened

The Italian DPA fined CA Autobank S.p.A. for using cookies without user consent.

Who was affected

Users whose browsing was tracked by CA Autobank's cookies were affected.

What the authority found

The authority found that CA Autobank violated GDPR by not obtaining consent before placing cookies.

Why this matters

This case highlights the need for clear consent practices regarding cookies. Businesses should review their cookie policies to ensure compliance and protect user privacy.

GDPR Articles Cited

AI-verified

Art. 5(1)(a) GDPR
Art. 28(3) GDPR
View original scraped data
Art. 5(1)(a) GDPR
Art. 28(3) GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. 30-ter(5)(a) d.lgs. 141/2010
Art. 30-ter(7-bis) d.lgs. 141/2010
Source verified 10 March 2026
national law identified
scope corrected
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 1 million on CA Autobank S.p.A. A person had filed a complaint with the DPA because a rental car voucher had been refused due to his inclusion in a “blacklist”. They had then submitted a request to CA Autobank S.p.A. asking for information on the data that had caused this decision, but did not receive a sufficient reply.

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for CA Autobank S.p.A. in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

6 June 2024

Authority

Garante per la protezione dei dati personali

Fine Amount

€1,000,000

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. CA Autobank S.p.A. - Italy (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: