Italian Data Protection Authority (Garante) · 27 November 2025
Verisure Italy s.r.l.
Non-compliance with general data processing principles
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 27 November 2025
- Country
- Italy
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2025/IT/009
What happened
The DPA imposed a fine of €400,000 on Verisure Italy, a provider of alarm systems, for unlawful marketing communications. The controller lacked a valid legal basis for marketing activities towards both former and prospective clients, failed to properly inform data subjects, applied excessive or indeterminate retention periods, and responded late to data subject rights requests.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(e)Read →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(3)Read →
- Art. 13Information to be provided where personal data are collected from the data subject13(2)(a)Read →
- Art. 17Right to erasure (‘right to be forgotten’)Read →
- Art. 21Right to objectRead →
- Data principles
- Data subject rights
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/IT/009.