an unnamed data subject – Complaint Upheld (Italy, 2022)

Complaint Upheld
Garante per la protezione dei dati personali26 May 2022Italy
final
ePrivacy
Complaint Upheld

The Italian DPA fined the owner of the store 'Turkish City' EUR 2,000 for not informing customers about video surveillance on the premises. This matters because businesses must be transparent about how they collect and use personal data. It serves as a reminder for small business owners to clearly communicate their data practices to customers.

What happened

The owner of 'Turkish City' installed video surveillance cameras without properly informing visitors about the data collection.

Who was affected

Customers and visitors to the 'Turkish City' store whose activities were recorded by the surveillance cameras.

What the authority found

The DPA found that the store owner violated GDPR's requirement to inform individuals about data processing activities.

Why this matters

This case highlights the importance of transparency in data collection. Small business owners should ensure they inform customers about surveillance and data practices to avoid penalties.

National Law Articles

AI-identified

Art. 144-<em>bis</em> d.lgs. 30 giugno 2003, n. 196

Entities Involved

an unnamed data subject
Facebook Italy
Meta Platforms Ireland Limited
Source verified 9 April 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Italian DPA was notified by the data subject that revenge porn related to them was being spread on Instagram and Facebook. The data subject asked the DPA to intervene pursuant to Article 144-bis of the Italian Privacy Code.Codice in materia di protezione dei dati personali - d. lgs. 30 giugno 2003, n. 196,, Art. 144-bis, available [https://www.gazzettaufficiale.it/dettaglio/codici/datiPersonali/ here] The DPA ordered Facebook Italy and Meta Platforms Ireland Limited to adopt measures to prevent the spread of the revenge porn related to the data subject on its platforms. The DPA also ordered Facebook Italy and Meta Platforms Ireland to store any material related to this for 12 moths, so it can be used as evidence. Furthermore, measures must be taken to prevent the direct identification of the data subject.

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Details

Decision Date

26 May 2022

Authority

Garante per la protezione dei dati personali

GDPRhub ID

gdprhub-5022

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. an unnamed data subject - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: