# Italy fines US data broker Lusha

> Live situation record from CLSTR: https://clstr.news/situations/italy-fines-us-data-broker-lusha
> Updated: 2026-08-06T05:09:50.000Z. Sources: 8. Developments: 2.

In late July 2026 Italy’s data‑protection authority, the Garante, imposed a €2 million administrative fine on U.S.‑based data‑broker Lusha Systems Inc. The regulator ordered the company to halt all processing of personal data of individuals located in Italy and to erase any such data already held. The decision cited breaches of core GDPR principles, including unlawful processing, lack of a valid legal basis, insufficient transparency and failure to observe data‑minimisation.

A follow‑up report in early August clarified that the fine, representing 10 % of the applicable ceiling, was adopted on 14 July and announced on 27 July. Lusha was given 60 days to demonstrate deletion of Italian‑territory data, and the fine could be reduced by half if the company appealed within the prescribed window. The authority emphasized that, despite having no EU establishment, Lusha’s activities constitute monitoring of persons in the Union and therefore fall under GDPR jurisdiction.

## Timeline

### 2026-08-06: Italian Data Regulator Fines US Data Broker Lusha €2 Million

Italy’s data protection authority fined US data broker Lusha €2 million for GDPR violations, ordering it to stop processing and delete personal data of individuals in Italy.

2 sources. https://clstr.news/cluster/italian-data-regulator-fines-us-data-broker-lusha-2-million

### 2026-07-30: Italian Data Protection Authority fines Lusha 2 million euros

Italy's data protection authority fined US data broker Lusha 2 million euros and ordered deletion of Italian personal data for GDPR breaches.

6 sources. https://clstr.news/cluster/italian-data-protection-authority-fines-lusha-2-million-euros

---
Cite as: Italy fines US data broker Lusha. CLSTR, https://clstr.news/situations/italy-fines-us-data-broker-lusha