Amiu s.p.a. – €200,000 Fine (Italy, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Amiu S.p.A. was fined €200,000 for sharing images from its surveillance cameras on Facebook without permission. This is important because it shows that companies must have a valid reason to publish personal images. Small businesses should ensure they have proper consent before sharing any identifiable images online.
What happened
Amiu S.p.A. published images from surveillance cameras on Facebook without a valid legal basis.
Who was affected
Individuals captured in the surveillance images who were identifiable and had their privacy violated.
What the authority found
The Italian data protection authority found that Amiu lacked a valid legal basis for processing personal data, violating GDPR rules.
Why this matters
This case highlights the need for companies to have clear consent before sharing personal information. It sets a precedent that companies can be held accountable for improper data sharing practices.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
National Law Articles
The Italian DPA has imposed a fine of EUR 200,000 on Amiu S.p.A.. The company operates the waste collection service for the city of Taranto and acted as a processor for this service. The company had installed several video surveillance cameras for the purpose of monitoring illegal waste disposal. The DPA found that Amiu had posted some images from the cameras on Facebook, showing individuals sufficiently visible making it possible to identify them. During its investigation, the DPA found that Amiu did not have a valid legal basis to publish the images. It also found that the processing was not sufficiently regulated, contrary to the requirements of Art. 28 GDPR. Finally, the DPA found that Amiu had not appointed a data protection officer.
Violations (1)
Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.
Art. 6(1) GDPR
Related Enforcement Actions (0)
No other enforcement actions found for Amiu s.p.a. in IT
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
28 April 2022
Authority
Garante per la protezione dei dati personali
Fine Amount
€200,000
Enforcement Tracker ID
ETid-1667
GDPRhub ID
gdprhub-4985About this data
Cite as: Cookie Fines. Amiu s.p.a. - Italy (2022). Retrieved from cookiefines.eu
Last updated: