- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
City of Rome (Roma capitale) – €10,000 Fine (Italy, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The City of Rome was fined €10,000 for publishing a document that revealed personal information about a mother and her child. This happened because the city claimed it needed to notify the mother about unpaid fees, but the data protection authority found this was not a valid reason to share such sensitive information. This case highlights the importance of having a legal basis before sharing personal data.
What happened
The City of Rome published a document online that included personal data about a mother and her minor child without a valid legal reason.
Who was affected
The mother and her minor child whose personal information was published by the City of Rome.
What the authority found
The authority ruled that the City of Rome unlawfully processed personal data because it lacked a valid legal basis for doing so.
Why this matters
This ruling emphasizes that public entities must have a clear legal reason to share personal data. Other municipalities should review their data-sharing practices to ensure compliance with data protection laws.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 10,000 on the city of Rome (Roma capitale). The city had published a document on the municipal website stating that a mother had not paid canteen fees. The document contained personal data of the mother and her minor child. The city stated that, in the absence of a permanent address of the mother to which the notice could have been sent, it had published the document to notify the homeless mother of the debt. However, the DPA found that this could not be considered a sufficient legal basis for processing the personal data, and thus the city unlawfully processed the data.
Related Enforcement Actions (0)
No other enforcement actions found for City of Rome (Roma capitale) in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
27 January 2021
Authority
Garante per la protezione dei dati personali
Fine Amount
€10,000
About this data
Cite as: Cookie Fines. City of Rome (Roma capitale) - Italy (2021). Retrieved from cookiefines.eu
Last updated: