Italian Regulator Fines Bakeca for Exposing Phone Numbers in Sex Work Ads

2 min readSources: Lex Blog

Italy’s Garante fined Bakeca S.r.l. for publishing sex work ads with someone’s phone number without their consent.

Why it matters: The move sharpens legal exposure for platforms on user-generated content—especially sensitive personal data—under EU data protection law. Legal teams must review moderation and consent processes to avoid regulatory pitfalls.

  • Italy’s Data Protection Authority (Garante) fined Bakeca S.r.l. for two sex work ads disclosing personal numbers.
  • The Garante emphasized platforms must prevent the publication of sensitive information without consent.
  • Decision issued April 11, 2026, raises the bar for online content moderation and data protection.
  • Highlights growing regulatory enforcement on platform accountability for user content throughout the EU.

On April 11, 2026, Italy’s Data Protection Authority (Garante) fined online classifieds host Bakeca S.r.l. for allowing two sex work ads to publish an individual’s phone number without their permission.

  • The disclosed numbers appeared in explicit listings, directly implicating stricter privacy requirements for adult content and platform practices.
  • According to the Garante, "Platforms must implement adequate measures to prevent the dissemination of personal data without consent, particularly in contexts involving sensitive information."

This enforcement signals regulators expect platforms—not just users—to proactively prevent release of personal data, especially in sensitive categories. Compliance teams should reassess content moderation and notice-and-consent workflows to preempt data protection violations.

The Bakeca case aligns with a string of heightened compliance actions following the CJEU's approach in Russmedia, sharpening EU-wide scrutiny of online platform liability for personal data posted by users.

As online marketplaces and forums host increasingly sensitive content, cross-border legal teams face mounting pressure to coordinate privacy defense strategies. Stronger due diligence on user submissions and automated redaction of personal details are likely to become compliance essentials.

By the numbers:

  • 2 — Number of Bakeca ads cited for unauthorized phone number disclosure
  • April 11, 2026 — Date Italian DPA issued its enforcement decision

Yes, but: The fine's amount has not been disclosed, and Bakeca’s response to the ruling remains pending.

What's next: Other EU data protection authorities may reference the Bakeca decision in future enforcement on platform liability.