Enforcing jurisdiction
Italy · Geography does not establish applicable law.
Confirmed applicable legislation

Autostrade per l’Italia S.p.A. – €420,000 Fine (Italy, 2025)

€420,000Garante per la protezione dei dati personali21 May 2025Italy
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Autostrade per l’Italia S.p.A. was fined €420,000 for using social media data from a worker in a disciplinary case without legal grounds. This ruling underscores the need for companies to have a valid reason for processing personal data. It serves as a reminder for businesses to review their data usage policies.

What happened

Autostrade per l’Italia S.p.A. used data from a worker's social media profiles in a disciplinary proceeding without a legal basis.

Who was affected

The worker whose social media data was used without consent was affected.

What the authority found

The authority found that Autostrade did not have a valid legal basis for processing the worker's personal data, violating GDPR rules.

Why this matters

This case stresses the importance of having a legitimate reason for using personal data, encouraging companies to ensure compliance with data protection regulations.

Recorded legal citations
Automatically processed
Art. 6 GDPR
Art. 5(1)(a) GDPR
Art. 88 GDPR
View original scraped data
Art. 5(1)(a) GDPR
b)
c) GDPR
Art. 6 GDPR
Art. 88 GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 6 March 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 420,000 on Autostrade per l’Italia S.p.A. The controller used data from a worker's social media profiles obtained by other workers and a third party in a disciplinary proceeding. The controller did not have a legal basis to use this data.

Details

Fine Date

21 May 2025

Authority

Garante per la protezione dei dati personali

Fine Amount

€420,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Autostrade per l’Italia S.p.A. - Italy (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: