- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Google LLC – Violation Found (Italy, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Google LLC was ordered to remove certain URLs from search results that linked a user to a fraud case they were acquitted of. The Italian data protection authority found that these results could harm the user's personal and professional reputation. This decision underscores the importance of ensuring accurate and fair representation of individuals in search results.
What happened
Google LLC was ordered to remove URLs that linked a user to a judicial fraud case from its search results.
Who was affected
A user whose name was associated with outdated and harmful search results related to a fraud case.
What the authority found
The Italian data protection authority ruled that Google LLC violated data accuracy principles by not removing misleading search results linked to the user's name.
Why this matters
This case highlights the responsibility of search engines to ensure that their results are accurate and do not harm individuals' reputations. Website operators should be aware of the implications of outdated or incorrect information appearing online.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Entities Involved
Source checks
Secondary-source text retrieved.
Automated check recorded — 11 April 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Guarantor for the Protection of Personal Data received a complaint of a data subject pursuant to Article 77 GDPR, in which Google LLC was ordered to remove URLs yielding results in which the data subject was linked to a judicial affair involving charges of fraud of which he later was acquitted. Due to these search results, both personal and professional reputation of the data subject were susceptible to harm. Pursuant to Article 55 (1) GDPR, it falls within the realm of competence of the Italian Guarantor to decide complaints brought before it when reference to its national territory is given. Google LLC asserted that web pages linked to two of the URLs mentioned by the data subject, cannot via search results be associated with the data subject. According to Article 57 1 f GDPR, the Guarantor does neither find sufficient reason to adopt measures in this regard nor to extend a similar assessment to the request for removal outside of solely European versions of the search engine. The controller also noted that it cannot accede to the request for removal of the remaining URLs as neither has public interest ceded in these nor did the data subject sufficiently communicate the acquittal regarding the crime of fraud. The picture drawn by the search engine´s results does not however yield an apt representation of the data subject´s acquittal in 2015. The Guarantor has found that processing of such data via Google LLC violates the principles of accuracy and updating of data as provided in Art 5 par 1 let d GDPR. Following Art 58 2 c and g GDPR, the Guarantor finds the data subject´s complaint well-founded and hence orders Google LLC to issue the removal of said remaining URLs found to be in association with the data subject´s name. Pursuant to Article 157 of the Code on the Protection of Personal Data, Google LLC is invited to present which measures have been taken to achieve what was prescribed. Failure to respond to the above request is punishable by the administrative penalty set forth in Article 166 of the Code.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for Google LLC in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
23 March 2023
Authority
Garante per la protezione dei dati personali
GDPRhub ID
gdprhub-5879About this data
Cite as: Cookie Fines. Google LLC - Italy (2023). Retrieved from cookiefines.eu
Last updated: