Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Sorgenia S.p.a.: Insufficient technical and organisational measures to ensure information security

€676,956 Fine
Sorgenia S.p.a.
ITALY
Art. 5 GDPR Art. 12 GDPR Art. 25 GDPR
Security Controllers Processing Agreement Privacy by Design & Default Supervisory Authorities Law Enforcement Direct Marketing Personal Data
Apr 14, 2023 Source

How it connects

Related across sources

News De Deense beschermingsautoriteit (SA) heeft verklaard dat het gebruik van Google Analytics onrechtmatig is zonder aanvullende maatregelen. Datatilsynet News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet Guidance EDPB Annual Report 2021 EDPB Guidance EDPB Annual Report 2019 EDPB Literature If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation Computer law & security review Guidance EDPB Annual Report 2022 EDPB

Full text

The Italian DPA has imposed a fine of EUR 676,956 against Sorgenia S.p.a.. The DPA had received several complaints from data subjects regarding unauthorized telemarketing. During its investigation, the DPA found that the controller had not taken appropriate technical and organizational measures to be informed about all the operations carried out in the telemarketing chain. In addition, the controller failed to process a data subjects request in a timely manner.

Industry: Transportation and Energy

Original document at the source www.gpdp.it

Similar Content