Sign in

Info Other, enforcement EU

Italian DPA fines Wind Tre EUR 16.7 million for unlawful telemarketing and data protection breaches

Original title: Italian DPA fines Wind Tre EUR 16 700 000 for unlawful telemarketing and data protection infringements

Published
Source: edpb.europa.eu
Effective
Not stated
Deadline
Not stated
Framework: GDPR
Regulation (EU) 2016/679 (as corrected 2018) source
in 14 days
Indicative European Parliament plenary date (first reading) for the small mid-caps omnibus, COM(2025) 501, which would raise the Article 30 records exemption to organisations under 750 employees - a forecast, not a fixed date source

Why it matters

The Italian Data Protection Authority issued a definitive administrative fine of EUR 16.7 million against Wind Tre S.p.A. following an investigation into unlawful telemarketing practices and data protection breaches. Wind Tre processed personal data for marketing and contract activation without valid consent, continued sending promotional communications to individuals who objected, and failed to implement adequate technical and organizational measures. The company must cease unlawful data processing activities and comply with GDPR requirements across its entire sales network.

What changed

  • Wind Tre S.p.A. was imposed a definitive administrative fine of EUR 16.7 million by the Italian DPA for violations of GDPR Articles 5, 6, 12, 15, 21, 24, 25, and 32
  • The authority issued a definitive ban on Wind Tre's unlawful data processing activities, requiring cessation of unauthorized processing for marketing and contractual purposes
  • Wind Tre is required to ensure compliance with data protection rules throughout its entire sales network and implement effective measures to prevent future breaches
  • The DPA identified that Wind Tre sent promotional communications to individuals despite their exercise of the right to object and without valid consent
  • Wind Tre unlawfully activated contracts and services without individuals' knowledge, involving unauthorized processing of personal data, and maintained insufficient technical and organizational safeguards

Who is affected

Telecommunications service providers operating in the EU (specifically Italy); organizations conducting telemarketing campaigns; companies processing personal data for marketing and sales purposes

What to do

Open the official document

AI-assisted summary of the official document; the official text prevails. Not legal advice.

More changes in GDPR