🇮🇹

GDPR Fines in Italy

10 data protection authorities · Since 2017

Total Actions

783

Total Fines

€514.5M

Average Fine

€736K

Among actions with fines

Enforcement Trend

Decreasing

About Data Protection Enforcement in Italy

Italy is a major enforcement jurisdiction for GDPR and ePrivacy violations, with 10 data protection authorities overseeing compliance since 2017. To date, Italy's regulators have taken 783 enforcement actions totaling €514,547,582 in fines. The landmark case was a €79,100,000 fine against Enel Energia SpA in 2024, among the most significant GDPR and ePrivacy penalties recorded for this jurisdiction. Enforcement activity has moderated in recent years, potentially indicating improved compliance across the market or a shift in regulatory priorities. The most frequently enforced violations are cookies placed before consent (148 cases), third-party cookies without consent (30 cases), unclear cookie information (21 cases), reflecting the regulatory focus areas in this jurisdiction.

Enforcement Actions by Year

YearActionsTotal Fines
20171€0
20194€11.6M
202060€116.3M
202192€47.6M
2022167€60.7M
2023136€26.7M
2024123€151.9M
2025120€20.8M
202680€78.9M

Frequently Asked Questions

How many GDPR and ePrivacy enforcement actions has Italy issued?

Italy has issued 783 enforcement actions related to GDPR and ePrivacy, totaling €514.5M in fines.

What is the largest GDPR and ePrivacy fine in Italy?

The largest recorded penalty was a €79.1M fine against Enel Energia SpA on 2024-02-08.

How many data protection authorities operate in Italy?

Italy has 10 data protection authorities overseeing GDPR and ePrivacy enforcement.

Is GDPR and ePrivacy enforcement decreasing in Italy?

GDPR and ePrivacy enforcement in Italy has been decreasing in recent years.