Italy

Poste Vita S.p.a.

80,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-07-10.

Rank · Sector

#100

of 322 in Finance, Insurance and Consulting

Rank · Italy

#91

of 543

Rank · All fines

#537

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-07-10
Controller / Processor: Poste Vita S.p.a.
Sector: Finance, Insurance and Consulting
Quoted Articles: Art. 5 (1) a), f) GDPR, Art. 33 (1) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Italian DPA has imposed a fine on Poste Vita S.p.a. The controller failed to implement adequate technical and organisational measures to ensure data security. This resulted in a third party successfully tricking an employee into forwarding sensitive personal data, which was then used against the data subject.

Open original source Links to the regulator's original publication or another source.