Società Editoriale Il Fatto S.p.A.

What happened

The Italian DPA has imposed a fine of EUR 23,750 on Società Editoriale Il Fatto S.p.A. The controller is the publisher of a newspaper in which an article about a cable car accident in 2021 was published. The article contained the data subject's personal data and also disclosed information about their hospital admission following the accident. The article also related to the data subject's romantic and other personal relationships. The data subject requested the article's removal through anonymisation and de-indexing, and the controller subsequently de-indexed the article. However the article was still searchable via mainstream search engines, leading the data subject to request deletion and de-indexing a second time. Although the aforementioned incident was of public interest the authority stated that the disclosure of the data subject's personal data and relationships was unnecessary for the public to understand the case.

Summary from the CMS Enforcement Tracker, not by Fino. CC BY-NC-SA 4.0.

Rules involved

The source doesn’t list which GDPR articles were involved.

• Unlawful processing