Italian DPA fines Wind Tre €16.7 million for unlawful telemarketing

What happened

The Italian Data Protection Authority imposed an administrative fine of EUR 16 700 000 on Wind Tre S.p.A. for violations of GDPR principles in its telemarketing and contract activation practices. The authority also issued a definitive ban on processing personal data obtained without consent and ordered the company to strengthen its technical and organisational measures. The decision was based on infringements of consent, the right to object, accountability and security obligations.

Penalty

EUR 16 700 000

Why it matters for trust and compliance

• Its status is in effect. It is in force now.
• The fine underscores the GDPR’s strict enforcement of consent and data‑subject rights in telecom marketing.
• Takes effect June 5, 2026.
• Penalty: EUR 16 700 000.
• It relates to GDPR. The regulations library explains what that law requires.

Who is affected

Recommended actions

1. Review consent, cookie and tracking practices against the requirement.
2. Check that privacy notices describe the practices this addresses.
3. Confirm access, correction, deletion and opt-out requests are handled within the required time.
4. Map the security requirements to existing controls and close gaps.