Iliad Italia S.p.A.
€800,000
Non-compliance with general data processing principles
Decision Date
July 13, 2020
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Media, Telecoms and Broadcasting
Country
IT
Law
GDPRStatus
FINALDescription
The fine relates to data protection infringements concerning the processing of customer data for the activation of SIM cards and the manner in which payment data was recorded. In addition, the data protection authority stated that the company had violated the principles of lawfulness, fairness and transparency as well as the integrity and confidentiality with regard to the processing of personal data for direct marketing purposes and the storage of customer data in the personal area of its website.
Legal Citations
Art. 5Art. 25
Issues & Violations
Non-compliance with general data processing principles