Tarento municipality – €150,000 Fine (Italy, 2022)

€150,000Garante per la protezione dei dati personali28 April 2022Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Tarento municipality was fined EUR 150,000 for not properly managing video surveillance and sharing images on Facebook without consent. This matters because it shows that municipalities must be careful with surveillance and inform people about it.

What happened

The municipality allowed a company to post surveillance images on Facebook without proper consent or information.

Who was affected

Individuals who were captured on video surveillance cameras and had their images shared online.

What the authority found

The authority found that the municipality failed to regulate the video surveillance properly and did not inform people about it, violating GDPR requirements.

Why this matters

This case highlights the need for municipalities to conduct impact assessments and inform the public about surveillance activities. It underscores the importance of transparency and proper data management in public surveillance operations.

GDPR Articles Cited

AI-verified

Art. 12 GDPR
Art. 13 GDPR
Art. 14 GDPR
Art. 28 GDPR
Art. 35 GDPR
Art. 5(1)(a) GDPR
View original scraped data
Art. 5 GDPR
Art. 12 GDPR
Art. 13 GDPR
Art. 14 GDPR
Art. 28 GDPR
Art. 35 GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

Art. 122 Codice Privacy
Source verified 6 March 2026
national law identified
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 150,000 on Tarento municipality. The company Amiu S.p.A had operated the local waste collection service on behalf of the municipality. The company had installed several video surveillance cameras with the permission of the municipality to monitor illegal waste disposal. The DPA found that Amiu had posted some images from the cameras on Facebook, showing individuals sufficiently visible making it possible to identify them. During its investigation, the DPA also found that the municipality had not properly regulated the processing with Amiu S.p.A. In addition, the DPA found that the municipality had not provided sufficient information about the video surveillance cameras. The municipality also failed to conduct a data protection impact assessment regarding the installation of the cameras, which would have been necessary for such a large-scale systematic surveillance.

Related Enforcement Actions (0)

No other enforcement actions found for Tarento municipality in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

28 April 2022

Authority

Garante per la protezione dei dati personali

Fine Amount

€150,000

Enforcement Tracker ID

ETid-1668

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Tarento municipality - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: