- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Azienda regionale per lo sviluppo e per i servizi in agricoltura (ARSAC) – €50,000 Fine (Italy, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Regional agency for development and services in agriculture (ARSAC) was fined €50,000 for improperly processing employee geographic data. They lacked a legal basis for this data processing and failed to provide clear information about it. This case serves as a warning for organizations to ensure they have proper legal grounds for data processing.
What happened
ARSAC processed geographic data of its employees without sufficient legal basis and failed to provide necessary information about the data processing.
Who was affected
Employees of ARSAC whose geographic data was processed without proper legal justification.
What the authority found
The Italian DPA found that ARSAC breached GDPR principles by processing employee data without a valid legal basis and failing to conduct a data protection impact assessment.
Why this matters
This case highlights the importance of having a valid legal basis for processing personal data and the need for transparency in data handling practices. Organizations should ensure compliance to avoid significant fines.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA imposed a fine of EUR 50,000 on the Regional agency for development and services in agriculture (ARSAC). The controller processed geographic data of its employees without sufficient legal basis. The controller also failed to provide sufficient informations in its internal documents regarding the data procession, breached the basic principles of lawfullness, fairness, transparency and purpose limitation and failed to conduct a data protection impact assesement. The total sum of the fine can be reduced by 50% if paid within sixty days.
Related Enforcement Actions (0)
No other enforcement actions found for Azienda regionale per lo sviluppo e per i servizi in agricoltura (ARSAC) in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
13 March 2025
Authority
Garante per la protezione dei dati personali
Fine Amount
€50,000
About this data
Cite as: Cookie Fines. Azienda regionale per lo sviluppo e per i servizi in agricoltura (ARSAC) - Italy (2025). Retrieved from cookiefines.eu
Last updated: