Poste Italiane S.p.a. – €12,501,000 Fine (Italy, 2026)

€12,501,000Garante per la protezione dei dati personali17 April 2026Italy
final
ePrivacy
Fine

Poste Italiane was fined for misleading users about app permissions and using third-party cookies without consent. The authority found that users were not properly informed about how their data would be used. This case highlights the importance of clear communication and consent in digital services.

What happened

Poste Italiane was fined for requiring users to authorize app access under misleading conditions and using cookies without consent.

Who was affected

Users of the Poste Italiane app who were misled about data access and cookie usage.

What the authority found

The authority ruled that Poste Italiane violated GDPR by not obtaining proper consent for data processing.

Why this matters

This fine emphasizes the need for transparency and honesty in how companies communicate with users about data usage. Businesses should ensure they provide clear information and obtain valid consent from users.

GDPR Articles Cited
Automatically processed
Art. 6(GDPR)
Art. 13(GDPR)
Art. 25(GDPR)
Art. 32(GDPR)
Art. 35(GDPR)
Art. 5(1)(a) GDPR
Art. 5(1)(e) GDPR
Art. 6(1)(f) GDPR
View original scraped data
Art. 5(1)(e) GDPR
Art. 5(1)(a) GDPR
Art. 6(GDPR)
Art. 6(1)(f) GDPR
Art. 13(GDPR)
Art. 25(GDPR)
Art. 32(GDPR)
Art. 35(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
Article 122 Italian Code transposing Article 5(3) e-Privacy Directive 2002/58

Entities Involved

Poste Italiane S.p.a.
PostePay S.p.a.

Source checks

Secondary-source text retrieved.

Review needed — 28 April 2026.

Processing notes: articles corrected, national law identified, amount discrepancy, entity split needed, scope corrected, date discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Italy enforcementGarante per la protezione dei dati personali actionsAll Poste Italiane S.p.a. actions
Full Legal Summary
Detailed

Users were required to authorize app access to device data under misleading conditions, limiting app functionality if rejected.

Violations (2)

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Misleading Banner Messaging
critical

The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).

Art. 7 GDPR

Related Enforcement Actions (2)

Other enforcement actions involving Poste Italiane S.p.a. in IT

Fine
Oct 2022· Garante per la protezione dei dati personali

The Italian DPA (Garante) fined Poste Italiane S.p.a. EUR 10,000 for failing to respond to the data subject's request for access to their data in a ti...

€10K
Fine
Apr 2026· Garante per la protezione dei dati personali

Non-compliance with general data processing principles

€6.6M
Current
Apr 2026

Fine

€12.5M

Similar Cases

Enforcement actions with similar violations

Legal Person

2023 · Úřad pro ochranu osobních údajů

€4K

CNIL

2019 · Court of Justice of the European Union

unknown (claimant)

2021 · DPA OLGLinz

Details

Fine Date

17 April 2026

Authority

Garante per la protezione dei dati personali

Fine Amount

€12,501,000

GDPRhub ID

gdprhub-9958

Sources

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified
Cookie relevance: 80%

Cite as: Cookie Fines. Poste Italiane S.p.a. - Italy (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: