🇮🇹

GDPR Fines in Italy

10 data protection authorities · Since 2017

Total Actions

841

Total Fines

€457.7M

Average Fine

€605K

Among actions with fines

Enforcement Trend

Increasing

About Data Protection Enforcement in Italy

Italy is a major enforcement jurisdiction for GDPR and ePrivacy violations, with 10 data protection authorities overseeing compliance since 2017. To date, Italy's regulators have taken 841 enforcement actions totaling €457,663,188 in fines. The landmark case was a €79,107,101 fine against Enel Energia SpA in 2024, among the most significant GDPR and ePrivacy penalties recorded for this jurisdiction. Enforcement activity has been accelerating in recent years, suggesting that Italy's regulators are prioritizing GDPR and ePrivacy compliance. The most frequently enforced violations are cookies placed before consent (148 cases), third-party cookies without consent (30 cases), unclear cookie information (21 cases), reflecting the regulatory focus areas in this jurisdiction.

Enforcement Actions by Year

YearActionsTotal Fines
20171€0
20194€11.6M
202058€71.8M
202192€47.6M
2022166€40.7M
2023136€26.7M
2024123€151.9M
2025120€20.8M
2026141€86.6M

Frequently Asked Questions

How many GDPR and ePrivacy enforcement actions has Italy issued?

Italy has issued 841 enforcement actions related to GDPR and ePrivacy, totaling €457.7M in fines.

What is the largest GDPR and ePrivacy fine in Italy?

The largest recorded penalty was a €79.1M fine against Enel Energia SpA on 2024-02-08.

How many data protection authorities operate in Italy?

Italy has 10 data protection authorities overseeing GDPR and ePrivacy enforcement.

Is GDPR and ePrivacy enforcement increasing in Italy?

GDPR and ePrivacy enforcement in Italy has been increasing, with more actions being taken each year.