RCS Mediagroup S.p.a – €10,000 Fine (Italy, 2023)
RCS Mediagroup in Italy was fined for publishing personal information without properly addressing a complaint about it. This is significant because it shows that companies must respect individuals' privacy rights, even when dealing with public information. The fine of EUR 10,000 reflects the seriousness of the violation.
What happened
RCS Mediagroup published personal data from a public document without adequately responding to a complaint about it.
Who was affected
The complainant, whose personal data was published, was affected by this violation.
What the authority found
The Italian DPA ruled that RCS Mediagroup did not adequately protect the complainant's privacy rights, violating GDPR rules.
Why this matters
This ruling highlights the need for media companies to carefully consider privacy implications when publishing information, even if it is publicly accessible.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
National Law Articles
On 17 February 2023 the complainant brought a case to the Italian DPA claiming a violation of her data protection right concerning the dissemination by an Italian newspaper on 23 January 2023 of an article containing a picture of a holographic will of an actress. According to the complainant, the will clearly showed the name, date, place of birth, address and title of witness assumed by the complainant. The complainant further asserted to have requested RCS Mediagroup S.p.a (the data controller) to exercise her rights provided for from Article 15 GDPR to Article 22 GDPR but did not receive feedback. On 2 March 2023, the Italian DPA requested the data controller to respond to the complainant’s requests and to state whether they would comply with them. On 21 March 2023, the data controller declared that the will is a public deed which can be accessed by anyone with an interest and that the information of the witnesses is an integral part of that public deed. Hence, the public nature of the will deprived it of any confidentiality, and the photograph of the page of the will and the publication of the complainant’s personal data took place lawfully. To which the complainant responded that [https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/1556386 Article 6 of the Deontological Rules], which states that the disclosure of news of major public or social interest is not contrary to respect for the private sphere when the information is indispensable, does not apply and that the data controller should have refrained from disseminating the data of the complainant. Following this, the DPA issued a statement of the commencement of proceedings. The DPA assessed that the failure to reply to the request of the complainant by the data controller could be considered excusable since the complainant made an unclear request, as it referred to compensation for damages and to a streaming reproduction that the data controller never carried out. However, it also found that
Violations (1)
The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.
Art. 12, 13 GDPR
Related Enforcement Actions (0)
No other enforcement actions found for RCS Mediagroup S.p.a in IT
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
31 August 2023
Authority
Garante per la protezione dei dati personali
Fine Amount
€10,000
GDPRhub ID
gdprhub-6275About this data
Cite as: Cookie Fines. RCS Mediagroup S.p.a - Italy (2023). Retrieved from cookiefines.eu
Last updated: