Garante per la protezione dei dati personali (Italy) - 619/2026
Italy's Garante fines a sports facility €8,000 for installing surveillance cameras in pool dressing rooms.
Italy's Garante per la protezione dei dati personali has fined the Special Company for the Management of Sports Facilities of the Municipality of Trento €8,000. The fine was issued because surveillance cameras were installed in the dressing rooms of a public swimming pool without a proper legal basis, violating GDPR principles. The Garante found that the company failed to demonstrate the necessity and proportionality of the surveillance, and that the signage provided was inadequate, especially for an area with a high expectation of privacy.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Garante per la protezione dei dati personali?
Get an email when a new story names Garante per la protezione dei dati personali, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe Special Company for the Management of Sports Facilities of the Municipality of Trento installed surveillance cameras in changing rooms without establishing a valid legal basis, violating core GDPR principles of necessity and proportionality. Dressing rooms represent spaces with an exceptionally high expectation of privacy, making unjustified surveillance particularly egregious under data protection law. Compounding the violation, the organisation failed to provide adequate signage to inform individuals that they were being recorded. This case demonstrates that deploying monitoring or data-collection technology — even with ostensibly legitimate goals like security — requires documented lawful grounds, a proportionality assessment, and transparent communication to data subjects.