Italy

Iliad Italia S.p.A.

800,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2020-07-13.

Rank · Sector

#55

of 369 in Media, Telecoms and Broadcasting

Rank · Italy

#36

of 543

Rank · All fines

#196

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2020-07-13
Controller / Processor: Iliad Italia S.p.A.
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 25 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The fine relates to data protection infringements concerning the processing of customer data for the activation of SIM cards and the manner in which payment data was recorded. In addition, the data protection authority stated that the company had violated the principles of lawfulness, fairness and transparency as well as the integrity and confidentiality with regard to the processing of personal data for direct marketing purposes and the storage of customer data in the personal area of its website.

Open original source Links to the regulator's original publication or another source.