Italian DPA fines clothing company €5,000 over unanswered erasure request
A short enforcement summary from the Italian DPA shows how an informal request sent to a general contact address still triggers GDPR erasure obligations. The case turns on channel validity and ongoing marketing after a deletion request, a recurring fact pattern for any firm running SMS or email campaigns.
- The Italian DPA imposed a EUR 5,000 administrative fine on Barbuti S.p.A. by final decision dated 23 September 2026.
- The company failed to respond to an erasure request sent to its general contact email and kept sending promotional texts.
- Promotional messages lacked contact details allowing recipients to exercise their data protection rights, as required by Italian law.
- The DPA found infringements of Articles 5(2), 12 and 17 GDPR and Article 130 of the Italian Data Protection Code.
- Barbuti must adopt measures to comply with Article 130(5) and report those measures to the DPA within 30 days of notification.