DPA case 9782890 – Complaint Upheld (Italy, 2022)

Complaint Upheld
Garante per la protezione dei dati personali9 June 2022Italy
final
ePrivacy
Complaint Upheld

An Italian news website used Google Analytics cookies to track visitors without their consent and sent data to the US without proper safeguards. The Italian Data Protection Authority found this practice violated privacy rules. This ruling serves as a warning for websites about the importance of obtaining user consent for tracking.

What happened

The news website used Google Analytics cookies to collect data without user consent.

Who was affected

Visitors to the news website whose data was tracked by Google Analytics.

What the authority found

The Italian DPA ruled that the website violated GDPR by not obtaining consent for using tracking cookies.

Why this matters

This decision stresses the need for websites to ensure they have proper consent mechanisms in place for tracking technologies, reflecting ongoing scrutiny of online privacy practices.

GDPR Articles Cited
Automatically processed
Art. 24 GDPR
Art. 44 GDPR
Art. 46 GDPR
Art. 5(2) GDPR
Art. 13(1)(f) GDPR
View original scraped data
Art. 5(1)(a) GDPR
Art. 5(2) GDPR
Art. 13(1)(f) GDPR
Art. 24(GDPR)
Art. 44(GDPR)
Art. 46(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Secondary-source text retrieved.

Review needed — 18 October 2026.

Processing notes: articles corrected, bucket conflicts with cookie scope.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The news website used Google Analytics cookies, transferring data to the US without appropriate safeguards or user consent.

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Related Enforcement Actions (0)

No other enforcement actions found for DPA case 9782890 in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

9 June 2022

Authority

Garante per la protezione dei dati personali

GDPRhub ID

gdprhub-5028

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case 9782890 - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: