an unnamed data subject – Complaint Upheld (Italy, 2022)

Complaint Upheld
Garante per la protezione dei dati personali26 May 2022Italy
final
ePrivacy
Complaint Upheld

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An unnamed individual reported that revenge porn was being shared about them on Instagram and Facebook. The Italian data protection authority stepped in to order Meta to take action against this harmful content, showing that platforms must act to protect users from abuse.

What happened

The Italian data protection authority ordered Meta to prevent the spread of revenge porn related to a user on its platforms.

Who was affected

The individual whose revenge porn was being shared on social media was directly affected by this issue.

What the authority found

The authority mandated that Meta take measures to stop the spread of the content and store related material for evidence for 12 months.

Why this matters

This ruling emphasizes the responsibility of social media platforms to protect users from harmful content. Companies should be aware of their obligations to respond to such serious issues.

National Law Articles

AI-identified

Art. 144-bis Codice Privacy

Entities Involved

an unnamed data subject
Facebook Italy
Meta Platforms Ireland Limited
Source verified 9 April 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Italian DPA was notified by the data subject that revenge porn related to them was being spread on Instagram and Facebook. The data subject asked the DPA to intervene pursuant to Article 144-bis of the Italian Privacy Code.Codice in materia di protezione dei dati personali - d. lgs. 30 giugno 2003, n. 196,, Art. 144-bis, available [https://www.gazzettaufficiale.it/dettaglio/codici/datiPersonali/ here] The DPA ordered Facebook Italy and Meta Platforms Ireland Limited to adopt measures to prevent the spread of the revenge porn related to the data subject on its platforms. The DPA also ordered Facebook Italy and Meta Platforms Ireland to store any material related to this for 12 moths, so it can be used as evidence. Furthermore, measures must be taken to prevent the direct identification of the data subject.

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Details

Decision Date

26 May 2022

Authority

Garante per la protezione dei dati personali

GDPRhub ID

gdprhub-5022

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. an unnamed data subject - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: