NTT Data Italia S.P.A
Insufficient fulfilment of data breach notification obligations
تاريخ القرار
8 فبراير 2024
الهيئة
Italian Data Protection Authority (Garante)
IT
القطاع
Industry and Commerce
البلد
IT
القانون
GDPRالحالة
FINALالوصف
The Italian DPA has imposed a fine of EUR 800,000 on NTT Data Italia S.P.A. The fine is related to the fine imposed on UniCredit (ETid-2227). UniCredit had contracted NTT to carry out vulnerability analyses and penetration tests. During its investigation, the DPA found that NTT had not notified UniCredit of a data breach in a timely manner. In addition, NTT had contracted another company to carry out vulnerability assessments and penetration tests without prior authorization from the bank as the data controller.