Garante per la protezione dei dati personali
Data protection authority of Italy
Total Actions
765
Total Fines
€514.5M
Average Fine
€736K
Among actions with fines
Enforcement Factor
1.80
Moderately active
About Garante per la protezione dei dati personali
The Garante per la protezione dei dati personali is Italy's data protection authority and an active enforcer of GDPR and ePrivacy requirements. Garante per la protezione dei dati personali has taken 765 enforcement actions resulting in €514,547,582 in total penalties, with an average fine of €736K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.8), combining deterrent fines with corrective orders. Its most significant action was a €79,100,000 fine against Enel Energia SpA in 2024. Key enforcement areas include cookies placed before consent, third-party cookies without consent, unclear cookie information. The most frequently cited legal basis in Garante per la protezione dei dati personali's decisions is Art. 5(1) a) GDPR and Art. 6(GDPR).
Largest Fines by Garante per la protezione dei dati personali
View all actionsRecent Actions by Garante per la protezione dei dati personali
View all actionsEnforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2019 | 3 | €11.6M |
| 2020 | 58 | €116.3M |
| 2021 | 90 | €47.6M |
| 2022 | 166 | €60.7M |
| 2023 | 129 | €26.7M |
| 2024 | 121 | €151.9M |
| 2025 | 120 | €20.8M |
| 2026 | 78 | €78.9M |
Most Enforced Violations
Most Cited GDPR Articles
Frequently Asked Questions
How many GDPR and ePrivacy actions has Garante per la protezione dei dati personali issued?
Garante per la protezione dei dati personali has issued 765 enforcement actions related to GDPR and ePrivacy, totaling €514.5M.
What is Garante per la protezione dei dati personali's largest GDPR and ePrivacy fine?
The largest was a €79.1M fine against Enel Energia SpA on 2024-02-08.
What violations does Garante per la protezione dei dati personali enforce most?
The most commonly enforced violations by Garante per la protezione dei dati personali are cookies placed before consent, third-party cookies without consent, unclear cookie information.