Sign in

Info Other, enforcement EU

Italian DPA fines Wind Tre EUR 16.7 million for unlawful telemarketing and GDPR breaches

Original title: Italian DPA fines Wind Tre EUR 16 700 000 for unlawful telemarketing and data protection infringements

Published
Source: edpb.europa.eu
Effective
Not stated
Deadline
Not stated
Framework: GDPR
Regulation (EU) 2016/679 (as corrected 2018) source
in 14 days
Indicative European Parliament plenary date (first reading) for the small mid-caps omnibus, COM(2025) 501, which would raise the Article 30 records exemption to organisations under 750 employees - a forecast, not a fixed date source

Why it matters

The Italian Data Protection Authority has issued a final decision imposing an administrative fine of EUR 16.7 million on Wind Tre S.p.A. for multiple GDPR violations. The company unlawfully processed personal data for telemarketing purposes, continued sending promotional communications to individuals who exercised their right to object, and activated contracts without consent. Controllers operating complex sales networks must ensure robust technical and organizational measures to prevent unlawful marketing activities and maintain accountability for data processing across all channels.

What changed

  • Italian DPA imposed an administrative fine of EUR 16,700,000 on Wind Tre S.p.A. for GDPR violations involving unlawful telemarketing and data processing infringements
  • Wind Tre is subject to a definitive ban on processing personal data acquired without valid consent
  • The company is required to adopt measures ensuring effective compliance with data subjects' rights, particularly the right to object to direct marketing processing
  • Wind Tre must strengthen technical and organisational measures governing its sales network and implement procedures to verify lawfulness of data processing for promotional activities and contract activation
  • The decision reinforces that controllers using complex sales networks bear full responsibility for ensuring GDPR-compliant data processing and must implement effective safeguards against unlawful marketing and unauthorised contractual activations

Who is affected

Telecommunications sector companies operating in Italy with complex sales networks; any data controller using external sales partners for promotional activities and contract activation

What to do

Open the official document

AI-assisted summary of the official document; the official text prevails. Not legal advice.

More changes in GDPR