Vodafone Italia S.p.A.

€12,251,601

Non-compliance with general data processing principles

결정 날짜

2020년 11월 12일

권한

Italian Data Protection Authority (Garante)

IT

섹터

Media, Telecoms and Broadcasting

국가

IT

법률

GDPR

상태

FINAL

설명

The company was fined EUR 12,251,601 for unlawfully processing personal data of millions of customers for telemarketing purposes. The proceedings were preceded by hundreds of complaints from data subjects about unsolicited telephone calls, which led to an investigation by the data protection authority. This investigation revealed several violations of the data protection law, including the violation of consent requirements and the violation of general data protection obligations such as accountability. One of the main criticisms made by the Data Protection Agency was the use of fake numbers to make promotional calls by the contracted call centers (i.e. phone numbers not registered with the National Consolidated Registry of Communication Operators). Furthermore, further violations could be found in the handling of contact lists purchased from external providers. Finally, security measures for the management of customer data were also considered inadequate.

법적 인용

Art. 5 (1)Art. 6 (1)Art. 7Art. 15 (1)Art. 16Art. 21Art. 24Art. 25 (1)Art. 32Art. 33

문제 및 위반 사항

Non-compliance with general data processing principles

개인정보 보호 정책 시행에 대한 최신 정보

당사는 사용자의 개인정보를 존중합니다. 한 달에 한 번, 스팸 없이, 언제든지 구독을 취소할 수 있습니다.