Italian Data Protection Authority (Garante) · 6 October 2022
Servizio Idrico Integrato S.c.p.a.
Insufficient technical and organisational measures to ensure information security
Fine€15,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 6 October 2022
- Country
- Italy
- Sector
- Transportation and Energy
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/IT/058
What happened
The Italian DPA imposed a €15,000 fine on a company providing water services for the use of an insecure network protocol and the lack of encryption on its website.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(f)Read →
- Art. 32Security of processingRead →
- Data principles
- Data security
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/IT/058.