Enforcing jurisdiction
Italy · Geography does not establish applicable law.
Confirmed applicable legislation

Google LLC – Violation Found (Italy, 2023)

Violation Found
Garante per la protezione dei dati personali23 March 2023Italy
final
Violation Found

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Google LLC was ordered to remove certain URLs from search results that linked a user to a fraud case they were acquitted of. The Italian data protection authority found that these results could harm the user's personal and professional reputation. This decision underscores the importance of ensuring accurate and fair representation of individuals in search results.

What happened

Google LLC was ordered to remove URLs that linked a user to a judicial fraud case from its search results.

Who was affected

A user whose name was associated with outdated and harmful search results related to a fraud case.

What the authority found

The Italian data protection authority ruled that Google LLC violated data accuracy principles by not removing misleading search results linked to the user's name.

Why this matters

This case highlights the responsibility of search engines to ensure that their results are accurate and do not harm individuals' reputations. Website operators should be aware of the implications of outdated or incorrect information appearing online.

Recorded legal citations
Automatically processed
Art. 5(1)(d) GDPR
Art. 77 GDPR
Art. 55(1) GDPR
Art. 57(1)(f) GDPR
Art. 58(2)(c) GDPR
Art. 58(2)(g) GDPR
View original scraped data
Art. 5(1)(d) GDPR
Art. 55(1) GDPR
Art. 57(1)(f) GDPR
Art. 58(2)(c) GDPR
Art. 58(2)(g) GDPR
Art. 77(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Entities Involved

Google LLC
Data subject

Source checks

Secondary-source text retrieved.

Automated check recorded — 11 April 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Guarantor for the Protection of Personal Data received a complaint of a data subject pursuant to Article 77 GDPR, in which Google LLC was ordered to remove URLs yielding results in which the data subject was linked to a judicial affair involving charges of fraud of which he later was acquitted. Due to these search results, both personal and professional reputation of the data subject were susceptible to harm. Pursuant to Article 55 (1) GDPR, it falls within the realm of competence of the Italian Guarantor to decide complaints brought before it when reference to its national territory is given. Google LLC asserted that web pages linked to two of the URLs mentioned by the data subject, cannot via search results be associated with the data subject. According to Article 57 1 f GDPR, the Guarantor does neither find sufficient reason to adopt measures in this regard nor to extend a similar assessment to the request for removal outside of solely European versions of the search engine. The controller also noted that it cannot accede to the request for removal of the remaining URLs as neither has public interest ceded in these nor did the data subject sufficiently communicate the acquittal regarding the crime of fraud. The picture drawn by the search engine´s results does not however yield an apt representation of the data subject´s acquittal in 2015. The Guarantor has found that processing of such data via Google LLC violates the principles of accuracy and updating of data as provided in Art 5 par 1 let d GDPR. Following Art 58 2 c and g GDPR, the Guarantor finds the data subject´s complaint well-founded and hence orders Google LLC to issue the removal of said remaining URLs found to be in association with the data subject´s name. Pursuant to Article 157 of the Code on the Protection of Personal Data, Google LLC is invited to present which measures have been taken to achieve what was prescribed. Failure to respond to the above request is punishable by the administrative penalty set forth in Article 166 of the Code.

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Related Enforcement Actions (0)

No other enforcement actions found for Google LLC in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

23 March 2023

Authority

Garante per la protezione dei dati personali

GDPRhub ID

gdprhub-5879

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Google LLC - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: