- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Roma Servizi per La Mobilita S.r.l. – €60,000 Fine (Italy, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Roma Servizi per La Mobilita S.r.l. was fined EUR 60,000 for not protecting the data of citizens with permits to access restricted traffic areas. This is important because it shows that companies must take proper security measures to safeguard personal information. Failing to do so can lead to serious consequences.
What happened
The company failed to implement adequate security measures for data related to traffic permits.
Who was affected
Citizens who held permits to access restricted traffic areas in Rome.
What the authority found
The Italian data protection authority determined that the company did not analyze risks and thus did not protect the data properly.
Why this matters
This ruling emphasizes that companies must assess risks and ensure data is secure, especially when handling sensitive information like traffic permits.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA (Garante) fined Roma Servizi per La Mobilita S.r.l. EUR 60,000 for failing to take adequate technical and organizational measures regarding the data of citizens who had obtained permits to access restricted traffic areas. The controller was acting as a processor for the city of Rome. As part of this activity, it processed the data of individuals who held permits for restricted traffic areas. The permits were verified by scanning QR codes located on badges affixed to windshields. This allowed city staff to verify in real time whether the particular vehicle was allowed to be in the zone and to whom the permit had been issued. However, according to the DPA, not only city staff, but anyone could scan the codes and access the information, as it only required an ordinary QR scanner. The information stored in the system, included, for example, the name of the user or the license plate number of the vehicle. The DPA notes that the controller did not analyze the risk associated with the data processing and, as a result, did not implement adequate measures to protect the processing.
Related Enforcement Actions (0)
No other enforcement actions found for Roma Servizi per La Mobilita S.r.l. in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
11 February 2021
Authority
Garante per la protezione dei dati personali
Fine Amount
€60,000
About this data
Cite as: Cookie Fines. Roma Servizi per La Mobilita S.r.l. - Italy (2021). Retrieved from cookiefines.eu
Last updated: