Edizioni Proposta Sud S.r.l. – €20,000 Fine (Italy, 2023)

€20,000Garante per la protezione dei dati personali26 October 2023Italy
final
ePrivacy
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Edizioni Proposta Sud S.r.l. was fined for placing cookies on users' devices before getting their consent. This is important because it shows that companies must ask for permission before tracking users online. Businesses should be careful about how they use cookies to avoid penalties.

What happened

Edizioni Proposta Sud S.r.l. was fined for placing cookies on users' devices without prior consent.

Who was affected

Website visitors who had cookies placed on their devices by Edizioni Proposta Sud S.r.l. were affected.

What the authority found

The authority determined that Edizioni Proposta Sud S.r.l. violated GDPR by not obtaining valid consent before using cookies.

Why this matters

This ruling highlights the need for companies to implement clear consent mechanisms for cookies. It reinforces the trend of stricter enforcement of privacy rules regarding online tracking.

GDPR Articles Cited

AI-verified

Art. 9(GDPR)
Art. 12(GDPR)
Art. 5(1)(a) GDPR
Art. 5(1)(c) GDPR
Art. 5(1)(d) GDPR
Art. 58(2)(f) GDPR
View original scraped data
Art. 5(1)(a) GDPR
Art. 5(1)(c) GDPR
Art. 5(1)(d) GDPR
Art. 12(GDPR)

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. 157 Codice Privacy
Art. 166(2) Codice Privacy
Art. 136 Codice Privacy
Art. 137(1) Codice Privacy
Art. 137(3) Codice Privacy
Art. 139 Codice Privacy
Art. 4 Deontological Rules
Art. 11(2) Deontological Rules
Source verified 5 April 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The case involves a complaint filed against Edizioni Proposta Sud S.r.l., an Italian media outlet (the controller). The complaint concerns an article published on 21 December 2021 in "Il Quotidiano del Sud" owned by the controller. The article falsely reported that the complainant, a civil servant in the Municipality, had tested positive for COVID-19 and was in isolation. The publication included a photograph of the complainant and a caption indicating her supposed isolation. Subsequent articles on 23 December 2021 exacerbated the situation by linking her absence from a council meeting to a quarantine related to the virus. The complainant contested the accuracy of the information on the day of publication, requesting the removal of the article, but received no response from the controller. On 26 October 2022, the DPA requested the controller express its views on the complaint, to which the controller failed to respond. Only following a second request, for which the controller was charged with breaching [https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/9042678 Article 157 of the Codice Privacy] in conjunction with [https://www.garanteprivacy.it/codice Article 166(2) of the Codice Privacy], the controller defended its actions by claiming that the information was truthful and the information was of public interest and fell within the realm of freedom of the press. The Italian DPA concluded that the complainant's claim against the controller was justified. The DPA clarified that [https://www.garanteprivacy.it/codice Article 136 of the Privacy Code] does not exempt those who work in the field of journalism from complying with the general principles of data processing laid down in Article 5(1) GDPR. It further noted that [https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9067692 Article 4 of the Deontological Rules] mandates journalists to correct inaccuracies without delay. In light of the present facts, the DPA considered th

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Edizioni Proposta Sud S.r.l. in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

26 October 2023

Authority

Garante per la protezione dei dati personali

Fine Amount

€20,000

GDPRhub ID

gdprhub-6820

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Edizioni Proposta Sud S.r.l. - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: