On May 20, 2008, the Italian data protection authority (Garante) imposed on the Italian supermarket chain GS a €54,000 fine for its unlawful use of customer data. GS, which had obtained the data for the purpose of distributing fidelity cards, was fined for using the same data for targeted advertising without the data subjects’ consent. The Garante ordered the supermarket chain to correct the use of data and provide its customers with an unambiguous method which would allow them to refuse its use for targeted advertising.

The Garante’s official press release (in Italian) can be found at: