Comune di Trento – €50,000 Fine (Italy, 2024)

€50,000Garante per la protezione dei dati personali11 January 2024Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Comune di Trento was fined for using AI surveillance systems without proper consent from individuals. This ruling is significant because it shows that even public entities must comply with data protection laws. Organizations should be careful about how they use technology that collects personal data.

What happened

The Comune di Trento implemented AI-driven surveillance systems without obtaining necessary user consent.

Who was affected

Residents and individuals monitored by the AI surveillance systems were affected.

What the authority found

The authority determined that the Comune di Trento violated multiple GDPR provisions related to data processing and consent.

Why this matters

This case highlights the need for transparency and consent in the use of advanced technologies. It serves as a warning for both public and private organizations to ensure compliance with data protection regulations.

GDPR Articles Cited

AI-verified

Art. 6(GDPR)
Art. 9(GDPR)
Art. 10(GDPR)
Art. 13(GDPR)
Art. 14(GDPR)
Art. 35(GDPR)
Art. 5(1)(a) GDPR
Art. 83(GDPR)
View original scraped data
Art. 5(1)(a) GDPR
Art. 6(GDPR)
Art. 9(GDPR)
Art. 10(GDPR)
Art. 13(GDPR)
Art. 14(GDPR)
Art. 35(GDPR)
Art. 83(GDPR)

Original data from scraper before AI verification against source document.

Source verified 4 April 2026
articles corrected
national law identified
scope corrected
Full Legal Summary
Detailed

The Italian DPA received the news about a new AI-driven surveillance system implemented by the municipality of Trento, the controller, with the support of FBK, a research foundation. In the context of a social experiment, the controller allowed the deployment of three projects, “Marvel” and “Protector”, concluded by now, and “Precrisis” still to be activated, using AI systems that were developed by the foundation in order to collect data from public areas in the municipality by means of videocameras and microphones that could serve the aim of preventing potential situations of danger to the public. Upon learning about these facts, the DPA initiated an investigation into the processing operations related to the above mentioned projects by the controller and asked it to provide further information. Among other things, the controller specified that the projects were EU-funded and provided details about the technical functioning of each of them. In particular, “Marvel” is aimed at developing an automated system analysing real-time audiovisual scenes in order to detect urban security issues. The foundation has access to the recordings of the public cameras in the municipality, which are instantly anonymized and analysed in the workstations of the foundation. The “Protector” project instead is aimed at improving security around places of worship, especially against the risk of hate crimes and terror attacks. The platform acquires video data from cameras present in the areas around places of worship and textual data derived from social media hate comments which are then elaborated by an AI system in order to detect possible relevant risks. Here too, the foundation has real-time access to the recordings which are instantly anonymized. Lastly, as regards the “Precrisis” project, the controller submitted that this has not been implemented yet but will be activated soon, upon adopting the necessary measures for ensuring compliance with the GDPR. Further, the controller submi

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Comune di Trento in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

11 January 2024

Authority

Garante per la protezione dei dati personali

Fine Amount

€50,000

GDPRhub ID

gdprhub-7574

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Comune di Trento - Italy (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: