# Italian regulator GDPR enforcement actions

> Live situation record from CLSTR: https://clstr.news/situations/italian-regulator-gdpr-enforcement-actions
> Updated: 2026-07-30T07:35:55.000Z. Sources: 8. Developments: 2.

In late July 2026 Italy’s data‑protection authority, the Garante, issued two separate fines that illustrate its ongoing enforcement of the GDPR. On 27 July, the regulator fined U.S. data‑broker Lusha Systems €2 million for collecting, enriching and selling personal data of Italian residents through web‑scraping and broker purchases, including details of senior public officials. The Garante found the company’s reliance on “legitimate interest” invalid and ordered it to cease processing and delete the data.

Three days later, on 30 July, the Garante imposed a €280,000 penalty on Italian publisher Altroconsumo Edizioni for abusing personal data collected via incomplete registration forms. The company used the data for email‑marketing without a lawful basis, ignored opt‑out requests and failed to respect data‑subject rights. The regulator ordered it to stop processing the improperly collected data and to bring its practices into full GDPR compliance.

These actions demonstrate the Garante’s willingness to apply significant penalties to both foreign and domestic firms that violate European privacy rules, reinforcing the GDPR’s extraterritorial reach and its emphasis on lawful, transparent data handling.

## Timeline

### 2026-07-30: Italian data‑protection authority fines Altroconsumo Edizioni €280,000

Italy’s data‑protection authority fined Altroconsumo Edizioni €280,000 for GDPR breaches, including use of data from incomplete registrations for email marketing, ignoring opt‑out requests and failing to co‑ö­‑

5 sources. https://clstr.news/cluster/italian-dataprotection-authority-fines-altroconsumo-edizioni-280000

### 2026-07-27: Italian Data Regulator Fines US Broker Lusha €2 Million for GDPR Breach

Italy’s Garante fines US data‑broker Lusha €2 million for GDPR violations, ordering it to stop and delete personal data of Italian individuals.

3 sources. https://clstr.news/cluster/italian-data-regulator-fines-us-broker-lusha-2-million-for-gdpr-breach

---
Cite as: Italian regulator GDPR enforcement actions. CLSTR, https://clstr.news/situations/italian-regulator-gdpr-enforcement-actions