Avis Budget Italia S.p.A.

What happened

The DPA found that a car rental company’s disclosure of personal data to law enforcement authorities in connection with a traffic code violation was a data breach. The controller submitted data of a previous customer who was not responsible for the traffic code violation.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 4Definitions4(12)Read →
• Art. 56Competence of the lead supervisory authority56(1)Read →
• Art. 60Cooperation between the lead supervisory authority and the other supervisory authorities concerned60(4) · 60(6)Read →