Enforcement action · Garante per la Protezione dei Dati Personali

[Garante] COMUNICATO STAMPA - Il Garante privacy sanziona Lusha per 2 milioni di euro. Monitorati e in vendita i dati di un elevato numero di persone

[Garante] COMUNICATO STAMPA - Il Garante privacy sanziona Lusha per 2 milioni di euro. Monitorati e in vendita i dati di un elevato numero di persone is an AI-related enforcement action involving Garante per la Protezione dei Dati Personali. Penalty: monetary_fine of $2000000. The Italian Data Protection Authority (Garante) sanctioned US data broker Lusha Systems Inc. with a 2 million euro fine for monitoring and selling personal data.

Action details

Agency
Garante per la Protezione dei Dati Personali
Jurisdiction
IT
Enforcement type
fine
Document type
enforcement action
Penalty
$2000000 monetary_fine
Topic
ai privacy

Summary

The Italian Data Protection Authority (Garante) has imposed a 2 million euro fine on Lusha Systems Inc., a US data broker. The sanction was issued because Lusha was found to be monitoring and selling the personal data of a large number of individuals. This enforcement action highlights regulatory scrutiny on data brokers and their practices of collecting and monetizing personal information.

Primary source

https://www.gpdp.it/garante/doc.jsp?ID=10275230 →

Frequently asked questions

What is [Garante] COMUNICATO STAMPA - Il Garante privacy sanziona Lusha per 2 milioni di euro. Monitorati e in vendita i dati di un elevato numero di persone?
The Italian Data Protection Authority (Garante) has imposed a 2 million euro fine on Lusha Systems Inc., a US data broker. The sanction was issued because Lusha was found to be monitoring and selling the personal data of a large number of individuals. This enforcement action highlights regulatory scrutiny on data brokers and their practices of collecting and monetizing personal information. Primary source →
Which agency brought the action?
Garante per la Protezione dei Dati Personali brought this enforcement action in IT. Primary source →
What was the penalty?
The disclosed penalty is a monetary_fine amount of $2000000. Primary source →
When did the action take effect?
The most recent activity on this action was published on 7/27/2026. Primary source →
Where can I find the primary source?
The primary source for [Garante] COMUNICATO STAMPA - Il Garante privacy sanziona Lusha per 2 milioni di euro. Monitorati e in vendita i dati di un elevato numero di persone is at https://www.gpdp.it/garante/doc.jsp?ID=10275230. AIGI does not paraphrase secondary commentary — every claim on this page links back to that primary source. Primary source →

Regulatory intelligence

Follow reviewed Garante per la Protezione dei Dati Personali AI enforcement developments.

AIGI monitors cited regulatory change and delivers decision-ready analysis. It does not monitor customer AI systems or enforce policy.