Enforcing jurisdiction
Italy · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Roma Capitale – €176,000 Fine (Italy, 2023)

€176,000Garante per la protezione dei dati personali27 April 2023Italy
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Roma Capitale was fined €176,000 for unlawfully sharing personal data of women who had abortions. The Italian DPA found that the city provided this sensitive information to a funeral service without proper legal grounds. This ruling underscores the importance of safeguarding personal data and ensuring lawful data sharing.

What happened

Roma Capitale was fined for unlawfully disclosing personal data of women who had abortions to a funeral service.

Who was affected

Women who had abortions and whose personal data was shared without consent were affected.

What the authority found

The Italian DPA ruled that Roma Capitale's disclosure of personal data violated GDPR regulations.

Why this matters

This case serves as a warning to public entities about the legal implications of sharing sensitive personal data. Organizations must ensure they have the proper legal basis before disclosing such information.

Recorded legal citations
Automatically processed
Art. 2-septies Codice della privacy GDPR
Art. 2-sexies Codice della privacy GDPR
Art. 9 GDPR
Art. 28 GDPR
Art. 29 GDPR
Art. 32 GDPR
Art. 5(1)(a) GDPR
View original scraped data
Art. 5(1)(a) GDPR
b)
c)
d)
f) GDPR
Art. 9 GDPR
Art. 28 GDPR
Art. 29 GDPR
Art. 32 GDPR
Art. 2-sexies Codice della privacy
Art. 2-septies Codice della privacy

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 6 March 2026.

Processing notes: articles corrected, national law identified, entity split needed.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Italian DPA imposed a fine of EUR 176,000 on Roma Capitale. The city had provided data of women who had abortions to the company in charge of the funeral, which included the data on boards placed on the graves of the fetuses. During its investigation, the DPA found that the disclosure of the women's personal data was unlawful, as the related law only provides for the provision of the data of the deceased.

Details

Fine Date

27 April 2023

Authority

Garante per la protezione dei dati personali

Fine Amount

€176,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Roma Capitale - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: