Skip to content
Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Intesa Sanpaolo Spa: Insufficient fulfilment of data subjects rights

Failure to respond to the data subject's request for access to their data in a timely manner.

€42,000 Fine
Intesa Sanpaolo Spa
ITALY
Art. 15 GDPR

Full text

Failure to respond to the data subject's request for access to their data in a timely manner.

Industry: Finance, Insurance and Consulting

How it connects

SAN 3154/2026 National court annuls DPA sanction against KFC Spain over website privacy information In May 2021, a data subject lodged a complaint with the DPA against KFC Restaurants Spain, S.L.U., the controller, concerning the processing of personal data through its website.… Jul 16, 2026 Supervisory Authorities Personal Data Controllers
1 As 183/2023-62 Health insurer must disclose aggregated patient treatment data under Free Access to OAKS Consulting s.r.o. (the company) provided consulting services concerning market access conditions for medicinal products and medical devices. Pursuant to the Czech Act on Free… Supreme Administrative Court Aug 4, 2026 Pseudonymization Anonymization Personal Data
14 K 19.01274 VG Ansbach: Lawyer not required to redact client data when submitting files to court In December 2018, the data subject filed with the DPA (the defendant in this case), a complaint under Article 77 GDPR against a lawyer who had represented the data subject in a… Sep 22, 2021 Legitimate Interest Personal Data Professional Secrecy
BA-6S/221/2019 Court upholds €50,000 fine on Sociálna poisťovňa for sending sensitive data by ordinary Sociálna poisťovňa, the social insurance agency (the controller), processes applications for foreign invalidity pensions and forwards related documents to the social insurance… Jun 25, 2025 Integrity and Confidentiality Principle Personal Data Data Breaches
W252 2247042-1 Austrian Fed Admin Court: AMS access response omitted 2018 family doctor call note The controller, an Public Employment Service Austria, processed the personal data of the data subject in connection with his file. On 21 February 2019, 15 March 2019 and 25… Federal Administrative Court Jan 22, 2024 Right of Access Personal Data Data Portability