The Italian supervisory authority (Garante) imposed an administrative fine of EUR 50,000 on an Italian entrepreneur. Garante has received numerous complaints regarding the unauthorized publication of personal data (names, addresses, telephone numbers) on a website owned by Petta Fabio Giovanni. The complainants never consented to their personal data being placed on the website. Moreover, the website lacked any information that could identify data controller.
Petta Fabio Giovanni has in no way documented the origin of the published data and did not prove the deletion of personal data as requested by the data subjects. In the justification of the decision, the authority indicated that cooperation with the controller was difficult. Due to these circumstances, and above all due to the lack of legal grounds to publish the data, Garante imposed the fine and additionally prohibited the entrepreneur from collecting, storing and publishing personal data.