Private individual – €5,000 Fine (Italy, 2023)

€5,000Garante per la protezione dei dati personali2 March 2023Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A private individual was fined EUR 5,000 for sending promotional messages without consent. This matters because it shows that even individuals must follow privacy rules when contacting people. Anyone sending marketing messages should ensure they have permission from recipients.

What happened

A private individual sent promotional messages without obtaining consent from the recipients.

Who was affected

Recipients of unsolicited promotional messages sent by the individual.

What the authority found

The Italian DPA found that the individual violated privacy rules by sending messages without consent, breaching GDPR's requirements for lawful processing.

Why this matters

This case serves as a warning that privacy laws apply to everyone, not just companies. Individuals and businesses alike must ensure they have consent before sending marketing communications.

GDPR Articles Cited

Art. 5(1)(a) GDPR
Art. 6(1)(a) GDPR
Art. 130 Codice della privacy GDPR
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 5,000 on a private individual. The individual had sent promotional messages to several data subjects without their consent.

Details

Fine Date

2 March 2023

Authority

Garante per la protezione dei dati personali

Fine Amount

€5,000

Enforcement Tracker ID

ETid-1807

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Private individual - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: