Italian Data Protection Authority (Garante) · 10 April 2025
Luka Inc.
Non-compliance with general data processing principles
Fine€5,000,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 10 April 2025
- Country
- Italy
- Sector
- Media, Telecoms and Broadcasting
- Regulator’s reference
- Not recorded
- Fino case number
- 2025/IT/077
What happened
The DPA fined the provider of the “virtual companion” Replika AI €5,000,000 for unlawfully processing personal data, for transparency violations, and for failing to implement effective age verification mechanisms.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 6Lawfulness of processingRead →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 24Responsibility of the controllerRead →
- Art. 25Data protection by design and by default25(1)Read →
- Accountability
- Data principles
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2025/IT/077.