La Combricola dei Birichini di Betty – €10,000 Fine (Italy, 2025)

€10,000Garante per la protezione dei dati personali10 July 2025Italy
final
ePrivacy
Fine

La Combricola dei Birichini di Betty, a children's daycare, faced a fine for posting pictures of children online without proper consent and for using invasive CCTV. This ruling is crucial as it highlights the need for childcare providers to protect children's privacy. Daycares must be cautious about how they handle and share children's images.

What happened

The daycare published invasive pictures of children online and used CCTV surveillance without proper assessments.

Who was affected

Children in the daycare and their parents were affected by these privacy violations.

What the authority found

The Italian data protection authority found that the daycare violated multiple privacy rules by failing to obtain proper consent and not conducting necessary assessments.

Why this matters

This case underscores the importance of privacy in childcare settings. Daycares should implement strict policies to protect children's images and ensure compliance with privacy laws.

GDPR Articles Cited

AI-verified

Art. 6(GDPR)
Art. 13(GDPR)
Art. 35(GDPR)
Art. 5(1)(a) GDPR
Art. 7(2) GDPR
Art. 12(1) GDPR
Art. 37(7) GDPR
Art. 38(6) GDPR
View original scraped data
Art. 5(1)(a) GDPR
Art. 6(GDPR)
Art. 7(2) GDPR
Art. 12(1) GDPR
Art. 13(GDPR)
Art. 35(GDPR)
Art. 37(7) GDPR
Art. 38(6) GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

2-ter d. lgs. 196/2003
Source verified 5 April 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The controller for the case is a private children's daycare. A parent filed a complaint with the DPA after finding that the controller published pictures of children online, including invasive pictures of rather delicate moments of their daily lives. During the investigation the DPA found that the controller implemented invasive CCTV surveillance on its premises and did not carry out a DPIA with regards to the system. The DPA held that the controller violated Articles 5(1)(a), 6, 7, 12(1), 13, 35, 37(7) and 38(6) GDPR as well as Article 2-ter of Italy’s “Privacy Code” (d. lgs. 196/2003). The DPA issued a €10,000 fine. The DPA also ordered the controller to stop publishing children’s pictures, erase all the pictures still available online, and delete any pictures it stored. In determining the fine, the DPA considered that by the time of the decision, the controller had removed (most of) the pictures, had appointed a new DPO, and had taken other steps towards compliance. = The DPA found that many pictures of the children in the controller’s care, were publicly available on the controller’s website as well as on its Google Maps business profile. Some of the pictures included rather delicate moments of the children’s daily lives. The controller pointed out that during enrolment, parents signed a consent form that covered the publication of children’s pictures for education purposes and for advertising the controller’s activities. On this basis, the controller claimed that it lawfully published the pictures under the legal basis of consent. The DPA rejected the argument, for several reasons. The DPA clarified that parental consent must be exercised in the pursuit of the child’s best interestWith regards to the centrality of the best interest of the child, the decision refers to WP29 guidance on the protection of children's data: see WP29, 'Working Document 1/2008 on the protection of children's personal data (General guidelines and the special case of schools)', 19 F

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for La Combricola dei Birichini di Betty in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

10 July 2025

Authority

Garante per la protezione dei dati personali

Fine Amount

€10,000

GDPRhub ID

gdprhub-9563

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. La Combricola dei Birichini di Betty - Italy (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: