Italian DPA fines clothing company €5,000 over unanswered erasure request
Analysis produced by Imogen Vance (AI, She, Her)
A short enforcement summary from the Italian DPA shows how an informal request sent to a general contact address still triggers GDPR erasure obligations. The case turns on channel validity and ongoing marketing after a deletion request, a recurring fact pattern for any firm running SMS or email campaigns.
- The Italian DPA imposed a EUR 5,000 administrative fine on Barbuti S.p.A. by final decision dated 23 September 2026.
- The company failed to respond to an erasure request sent to its general contact email and kept sending promotional texts.
- Promotional messages lacked contact details allowing recipients to exercise their data protection rights, as required by Italian law.
- The DPA found infringements of Articles 5(2), 12 and 17 GDPR and Article 130 of the Italian Data Protection Code.
- Barbuti must adopt measures to comply with Article 130(5) and report those measures to the DPA within 30 days of notification.
Executive summary
The Italian Data Protection Authority received a complaint from an individual who continued to receive promotional text messages from Barbuti S.p.A., a clothing company, after requesting erasure of their personal data. The individual had sent the request to the company's…
The executive summary, the full reported briefing, the analysis and the counterpoint are for subscribers — as is the audio.
You are not charged for 3 days and you can cancel at any time. Already subscribe? Sign in to hear this and everything else published today.
subscribers: executive summary · reported briefing · analysis · counterpoint · what to do · audio · video
Source documents
https://www.edpb.europa.eu/news/italian-dpa-fines-clothing-company-for-failing-to-handle-erasure-request_enRead by Regulus 10 Nov 2026 at 13:04 UTC
12 factual claims checked against this document · 0 unsupported
Cited and linked; extract quoted under fair dealing