Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Vodafone Italia S.p.A.: Non-compliance with general data processing principles

€12,251,601 Fine
Vodafone Italia S.p.A.
ITALY
Art. 5 GDPR Art. 6 GDPR Art. 7 GDPR Art. 15 GDPR Art. 16 GDPR Art. 21 GDPR Art. 24 GDPR Art. 25 GDPR Art. 32 GDPR Art. 33 GDPR
IP Address Telecommunications Security Personal Data Accountability Direct Marketing Law Enforcement Processing
Nov 12, 2020 Source

How it connects

Related across sources

News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet News Irish Data Protection Commissioner Fines Instagram EUR 405M for Children Privacy Violations Hunton Andrews Kurth Literature GDPR Implementation Series ∙ Hungary: Introduction to the GDPR Application and a Brief History of Data Protection European Data Protection Law Review Literature GDPR Implementation Series ∙ Spain: Preparations for a New Law on Data Protection to Implement the GDPR European Data Protection Law Review Literature GDPR Implementation Series ∙ United Kingdom: Heading Towards Brexit but with a Data Protection Bill Implementing GDPR European Data Protection Law Review Literature If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation Computer law & security review

Full text

The company was fined EUR 12,251,601 for unlawfully processing personal data of millions of customers for telemarketing purposes. The proceedings were preceded by hundreds of complaints from data subjects about unsolicited telephone calls, which led to an investigation by the data protection authority. This investigation revealed several violations of the data protection law, including the violation of consent requirements and the violation of general data protection obligations such as accountability. One of the main criticisms made by the Data Protection Agency was the use of fake numbers to make promotional calls by the contracted call centers (i.e. phone numbers not registered with the National Consolidated Registry of Communication Operators). Furthermore, further violations could be found in the handling of contact lists purchased from external providers. Finally, security measures for the management of customer data were also considered inadequate.

Industry: Media, Telecoms and Broadcasting

Original document at the source www.garanteprivacy.it

Similar Content