Garante per la protezione dei dati personali (Italy) · 13 April 2023
Arnia SocCoop
About: Consent, Data principles, Data security, Processor obligations, Transparency, Unlawful processing
Fine€1,800,000Violation found
- Regulator
- Garante per la protezione dei dati personali (Italy)
- Decided
- 13 April 2023
- Country
- Italy
- Sector
- Not given
- Regulator’s reference
- 9893718
- Fino case number
- 2023/IT/119
What happened
The Italian DPA investigated companies that ilegally acquired and shared personal data for advertising of eletric utilities and ordered the confiscation of IT and paper files, in addition to imposing fines of €200,000, €300,000 , €500,000 and €800,000.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1) · 5(1)(a) · 5(2)Read →
- Art. 6Lawfulness of processingRead →
- Art. 7Conditions for consentRead →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 28ProcessorRead →
- Art. 29Processing under the authority of the controller or processorRead →
- Art. 30Records of processing activitiesRead →
- Art. 32Security of processingRead →
- Consent
- Data principles
- Data security
- Processor obligations
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/IT/119.