Italian Data Protection Authority (Garante) · 10 February 2022
Scanshare S.r.l.
Insufficient technical and organisational measures to ensure information security
Fine€10,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 10 February 2022
- Country
- Italy
- Sector
- Public Sector and Education
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/IT/113
What happened
The Italian DPA issued a fine of €10,000 against an IT company due to a data breach and the assignment of a sub-processor without the controller's authorisation, in violation of Articles 32 and 28(2) GDPR respectively.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data security
- Processor obligations
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/IT/113.