RCS Mediagroup S.p.a – €10,000 Fine (Italy, 2023)

€10,000Garante per la protezione dei dati personali31 August 2023Italy
final
ePrivacy
Fine

RCS Mediagroup in Italy was fined for publishing personal information without properly addressing a complaint about it. This is significant because it shows that companies must respect individuals' privacy rights, even when dealing with public information. The fine of EUR 10,000 reflects the seriousness of the violation.

What happened

RCS Mediagroup published personal data from a public document without adequately responding to a complaint about it.

Who was affected

The complainant, whose personal data was published, was affected by this violation.

What the authority found

The Italian DPA ruled that RCS Mediagroup did not adequately protect the complainant's privacy rights, violating GDPR rules.

Why this matters

This ruling highlights the need for media companies to carefully consider privacy implications when publishing information, even if it is publicly accessible.

GDPR Articles Cited

AI-verified

Art. 5(GDPR)
Art. 22(GDPR)
Art. 5(1)(a) GDPR
Art. 83(GDPR)
Art. 58(2)(i) GDPR
View original scraped data
Art. 5(GDPR)
Art. 5(1)(a) GDPR
Art. 22(GDPR)
Art. 58(2)(i) GDPR
Art. 83(GDPR)

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Article 136 Codice Privacy
Article 137(3) Codice Privacy
Article 139 Codice Privacy
Article 6 Regole Deontologiche
Source verified 5 April 2026
articles corrected
national law identified
Full Legal Summary
Detailed

On 17 February 2023 the complainant brought a case to the Italian DPA claiming a violation of her data protection right concerning the dissemination by an Italian newspaper on 23 January 2023 of an article containing a picture of a holographic will of an actress. According to the complainant, the will clearly showed the name, date, place of birth, address and title of witness assumed by the complainant. The complainant further asserted to have requested RCS Mediagroup S.p.a (the data controller) to exercise her rights provided for from Article 15 GDPR to Article 22 GDPR but did not receive feedback. On 2 March 2023, the Italian DPA requested the data controller to respond to the complainant’s requests and to state whether they would comply with them. On 21 March 2023, the data controller declared that the will is a public deed which can be accessed by anyone with an interest and that the information of the witnesses is an integral part of that public deed. Hence, the public nature of the will deprived it of any confidentiality, and the photograph of the page of the will and the publication of the complainant’s personal data took place lawfully. To which the complainant responded that [https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/1556386 Article 6 of the Deontological Rules], which states that the disclosure of news of major public or social interest is not contrary to respect for the private sphere when the information is indispensable, does not apply and that the data controller should have refrained from disseminating the data of the complainant. Following this, the DPA issued a statement of the commencement of proceedings. The DPA assessed that the failure to reply to the request of the complainant by the data controller could be considered excusable since the complainant made an unclear request, as it referred to compensation for damages and to a streaming reproduction that the data controller never carried out. However, it also found that

Violations (1)

Unclear Cookie Information
high

The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.

Art. 12, 13 GDPR

Related Enforcement Actions (0)

No other enforcement actions found for RCS Mediagroup S.p.a in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

31 August 2023

Authority

Garante per la protezione dei dati personali

Fine Amount

€10,000

GDPRhub ID

gdprhub-6275

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. RCS Mediagroup S.p.a - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: