- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Lazio Region – €100,000 Fine (Italy, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Lazio Region was fined for keeping outdated personal data in its records, including information about a person who had died in 1995. The authority found that the region failed to ensure the accuracy of its data and did not inform individuals properly about how their data was used. This case highlights the need for organizations to maintain accurate records and respect individuals' privacy.
What happened
The region was fined for retaining personal data of a deceased individual and not providing proper information about data processing.
Who was affected
The individual who received an invitation for a health program addressed to their deceased daughter.
What the authority found
The authority ruled that the region violated multiple GDPR principles, including data accuracy and transparency.
Why this matters
This case stresses the importance of data accuracy and transparency in data handling. Organizations must regularly update their records and inform individuals about their data usage.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 6 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 100,000 on Lazio Region. An individual had filed a complaint with the DPA because she had received an invitation from the regional health authority to participate in the cervical cancer screening program that was addressed to her daughter, who died in 1995. During its investigation, the DPA discovered that the daughter's data was still in the region's database even though she had already died. For this reason, the DPA found that the Region had violated the principles of accuracy and correctness. As the owner of the data, the Region should have ensured that the personal information was accurate and updated as necessary, and taken all reasonable steps to delete or correct the information it used in a timely manner. In addition to the above, the Garante also found that the Region had not properly provided data subjects with the required information about the processing of their personal data when sending out the invitation letters for a cervical cancer screening campaign. In imposing the fine, the DPA took into account, as an aggravating factor, that the Region had already received a fine.
Related Enforcement Actions (0)
No other enforcement actions found for Lazio Region in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
15 September 2022
Authority
Garante per la protezione dei dati personali
Fine Amount
€100,000
About this data
Cite as: Cookie Fines. Lazio Region - Italy (2022). Retrieved from cookiefines.eu
Last updated: