Business Owner – €2,000 Fine (Italy, 2026)

€2,000Garante per la protezione dei dati personali17 April 2026Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A business owner was fined €2,000 for using video surveillance at his premises without proper signage or authorization. The Italian data protection authority found that he did not inform people about the cameras. This case serves as a reminder for business owners to be clear about surveillance practices to protect privacy.

What happened

The business owner used video surveillance at his premises without putting up signs or obtaining necessary authorization from the Labour Inspectorate.

Who was affected

Visitors and employees at the business were affected by the lack of notification regarding the surveillance.

What the authority found

The authority ruled that the business owner violated data protection rules by failing to inform individuals about the surveillance and not securing required authorization.

Why this matters

This ruling highlights the importance of transparency in surveillance practices and the need for business owners to comply with legal requirements to protect the privacy of individuals.

GDPR Articles Cited

AI-verified

Art. 13(GDPR)
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
View original scraped data
Art. 5(1) a) GDPR
f) GDPR
Art. 13(GDPR)
Art. 32(GDPR)

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. 114 Codice Privacy
Source verified 27 May 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 2,000 on a business owner. The controller had been using video surveillance at his business premises. However, he did not put up appropriate signs to inform data subjects about it, nor did he obtain the necessary authorisation from the labour inspectorate.

Details

Fine Date

17 April 2026

Authority

Garante per la protezione dei dati personali

Fine Amount

€2,000

Enforcement Tracker ID

ETid-3180

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Business Owner - Italy (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: