Poste Vita S.p.a.
€80,000
Insufficient technical and organisational measures to ensure information security
Lēmuma datums
2025. gada 10. jūlijs
Iestāde
Italian Data Protection Authority (Garante)
IT
Nozare
Finance, Insurance and Consulting
Valsts
IT
Likums
GDPRStatuss
FINALApraksts
The Italian DPA has imposed a fine on Poste Vita S.p.a. The controller failed to implement adequate technical and organisational measures to ensure data security. This resulted in a third party successfully tricking an employee into forwarding sensitive personal data, which was then used against the data subject.
Juridiskās atsauces
Art. 5 (1)Art. 33 (1)
Jautājumi un pārkāpumi
Insufficient technical and organisational measures to ensure information security