- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Alpha Exploration – €2,000,000 Fine (Italy, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Alpha Exploration, which runs the social network Clubhouse, was fined €2 million for failing to protect user data. The Italian data protection authority found that the company did not inform users properly about how their data was used and allowed users to share audio messages without consent. This case highlights the importance of transparency and user consent in data handling.
What happened
Alpha Exploration was fined €2 million for multiple violations of GDPR related to user data handling on Clubhouse.
Who was affected
Clubhouse users whose data was mishandled, including their chat contacts and audio messages.
What the authority found
The Italian DPA ruled that Alpha Exploration violated several GDPR articles by failing to provide transparency and proper consent mechanisms for data processing.
Why this matters
This ruling emphasizes that companies must be transparent about data use and obtain proper consent from users. It serves as a warning for other social media platforms to review their data practices.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 5 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 2 million on Alpha Exploration. Alpha Exploration operates the social network Clubhouse. In the course of its investigation, the DPA found numerous violations of the GDPR. For example, the DPA found that there was a lack of transpanency regarding the use of users' data and their chat contacts. In addition, users of the network were able to store and share audio messages from other users without their consent. Moreover, account information was shared with unauthorized third parties without a valid legal basis. In addition, the company failed to define retention periods for personal data. Also, the company failed to provide users with sufficient information about numerous aspects of the processing of their personal data and had not implemented sufficient technical and organizational measures to protect personal data. Finally, the DPA found that the company failed to conduct a data protection impact assessment. At the end of the investigation, the DPA not only imposed a fine but also ordered a number of measures to be taken by the company. For example, the company must define retention periods and introduce a function that informs users that their chats are being recorded.
Related Enforcement Actions (0)
No other enforcement actions found for Alpha Exploration in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
6 October 2022
Authority
Garante per la protezione dei dati personali
Fine Amount
€2,000,000
About this data
Cite as: Cookie Fines. Alpha Exploration - Italy (2022). Retrieved from cookiefines.eu
Last updated: