Azienda regionale per lo sviluppo e per i servizi in agricoltura (ARSAC) – €50,000 Fine (Italy, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
ARSAC was fined EUR 50,000 for improperly handling employee geographic data. They did not have a valid reason to process this information and failed to inform employees about how their data was used. This case reminds businesses to be transparent and lawful when handling personal data.
What happened
ARSAC processed geographic data of its employees without a sufficient legal basis.
Who was affected
Employees whose geographic data was processed without proper justification.
What the authority found
The Italian DPA ruled that ARSAC violated multiple GDPR principles, including fairness and transparency, by not providing adequate information and failing to conduct a data protection impact assessment.
Why this matters
This ruling emphasizes the need for organizations to have clear legal grounds for processing personal data and to communicate effectively with employees about their data rights.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA imposed a fine of EUR 50,000 on the Regional agency for development and services in agriculture (ARSAC). The controller processed geographic data of its employees without sufficient legal basis. The controller also failed to provide sufficient informations in its internal documents regarding the data procession, breached the basic principles of lawfullness, fairness, transparency and purpose limitation and failed to conduct a data protection impact assesement. The total sum of the fine can be reduced by 50% if paid within sixty days.
Related Enforcement Actions (0)
No other enforcement actions found for Azienda regionale per lo sviluppo e per i servizi in agricoltura (ARSAC) in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
13 March 2025
Authority
Garante per la protezione dei dati personali
Fine Amount
€50,000
About this data
Cite as: Cookie Fines. Azienda regionale per lo sviluppo e per i servizi in agricoltura (ARSAC) - Italy (2025). Retrieved from cookiefines.eu
Last updated: