Italian Data Protection Authority (Garante) · 26 May 2022
Intesa Sanpaolo S.p.A
Insufficient legal basis for data processing
Fine€100,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 26 May 2022
- Country
- Italy
- Sector
- Finance, Insurance and Consulting
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/IT/086
What happened
The Italian DPA issued a €100,000 fine against a bank for neglecting to check whether a third party (the customer's father) was authorized to access a customers banking account details before communicating her data to him. While he was previously authorized to know them, over time he may have lost this right.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/IT/086.