Private individual
€5,000
Insufficient legal basis for data processing
Decision Date
March 2, 2023
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Individuals and Private Associations
Country
ES
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 5,000 on a private individual. The individual had sent promotional messages to several data subjects without their consent.
Legal Citations
Art. 5 (1)Art. 6 (1)Art. 130
Issues & Violations
Insufficient legal basis for data processing