Italy

CA Autobank S.p.A.

1,000,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2024-06-06.

Rank · Sector

#32

of 167 in Transportation and Energy

Rank · Italy

#30

of 543

Rank · All fines

#172

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2024-06-06
Controller / Processor: CA Autobank S.p.A.
Sector: Transportation and Energy
Quoted Articles: Art. 12 (3) GDPR, Art. 15 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Italian DPA has imposed a fine of EUR 1 million on CA Autobank S.p.A. A person had filed a complaint with the DPA because a rental car voucher had been refused due to his inclusion in a “blacklist”. They had then submitted a request to CA Autobank S.p.A. asking for information on the data that had caused this decision, but did not receive a sufficient reply.

Open original source Links to the regulator's original publication or another source.