Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Servizio Idrico Integrato S.c.p.a.: Insufficient technical and organisational measures to ensure information security

€15,000 Fine
Servizio Idrico Integrato S.c.p.a.
ITALY
Art. 5 GDPR Art. 32 GDPR
Security Privacy by Design & Default Controllers Processing Agreement Personal Data Law Enforcement Supervisory Authorities Data Controller
Oct 6, 2022 Source

How it connects

Related across sources

Guidance Guidelines 07/2022 on certification as a tool for transfers EDPB News What Happened to the Risk-Based Approach to Data Transfers? Future of Privacy Forum News De Deense beschermingsautoriteit (SA) heeft verklaard dat het gebruik van Google Analytics onrechtmatig is zonder aanvullende maatregelen. Datatilsynet News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet Guidance EDPB Annual Report 2021 EDPB Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR EDPB

Full text

The Italian DPA has fined Servizio Idrico Integrato S.c.p.a. EUR 15,000. The controller had operated a website where personal data was being processed without using an SSL form. The DPA found that the use of an SSL form would have been necessary for the security of the data. It therefore concluded that the controller had failed to implement appropriate technical and organizational measures to protect personal data.

Industry: Transportation and Energy

Original document at the source www.garanteprivacy.it

Similar Content