Italy

Mas s.r.l.

500,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-04-13.

Rank · Sector

#48

of 597 in Industry and Commerce

Rank · Italy

#44

of 543

Rank · All fines

#245

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-04-13
Controller / Processor: Mas s.r.l.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 13 GDPR, Art. 28 GDPR, Art. 29 GDPR, Art. 30 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 500,000 on Mas s.r.l.. As part of its investigation, the DPA found that the controller had acquired illegally created lists containing personal data and used them for marketing purposes without the consent of the data subjects in order to provide them with commercial offers from various energy companies.

Open original source Links to the regulator's original publication or another source.