Private individual – €5,000 Fine (Italy, 2023)

€5,000Garante per la protezione dei dati personali2 March 2023Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A private individual was fined EUR 5,000 for sending promotional messages without consent. This matters because it shows that even individuals must follow privacy rules when contacting people. Anyone sending marketing messages should ensure they have permission from recipients.

What happened

A private individual sent promotional messages without obtaining consent from the recipients.

Who was affected

Recipients of unsolicited promotional messages sent by the individual.

What the authority found

The Italian DPA found that the individual violated privacy rules by sending messages without consent, breaching GDPR's requirements for lawful processing.

Why this matters

This case serves as a warning that privacy laws apply to everyone, not just companies. Individuals and businesses alike must ensure they have consent before sending marketing communications.

GDPR Articles Cited

AI-verified

Art. 5(1)(a) GDPR
Art. 6(1)(a) GDPR
Art. 130 Codice della privacy GDPR
View original scraped data
Art. 5(1) a) GDPR
Art. 6(1) a) GDPR
Art. 130 Codice della privacy

Original data from scraper before AI verification against source document.

Source verified 14 March 2026
articles corrected
national law identified

Cite as: Cookie Fines. Private individual - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: