Italian Data Protection Authority (Garante) · 8 February 2024
NTT Data Italia S.P.A
Insufficient fulfilment of data breach notification obligations
What happened next. The Garante removed this decision from its website after a final court judgment against it. Source →
Fine€800,000Annulled by a court
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 8 February 2024
- Country
- Italy
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2024/IT/051
What happened
The DPA fined a processor €800,000 for engaging a sub-processor without the prior authorization of the controller and for the belated notification of a data breach to the controller.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 28Processor28(2)Read →
- Art. 33Notification of a personal data breach to the supervisory authority33(2)Read →
- Data breach
- Processor obligations
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2024/IT/051.