Vodafone Italia S.p.A.

€12,251,601

Non-compliance with general data processing principles

Дата принятия решения

12 ноября 2020 г.

Авторитет

Italian Data Protection Authority (Garante)

IT

Сектор

Media, Telecoms and Broadcasting

Страна

IT

Закон

GDPR

Статус

FINAL

Описание

The company was fined EUR 12,251,601 for unlawfully processing personal data of millions of customers for telemarketing purposes. The proceedings were preceded by hundreds of complaints from data subjects about unsolicited telephone calls, which led to an investigation by the data protection authority. This investigation revealed several violations of the data protection law, including the violation of consent requirements and the violation of general data protection obligations such as accountability. One of the main criticisms made by the Data Protection Agency was the use of fake numbers to make promotional calls by the contracted call centers (i.e. phone numbers not registered with the National Consolidated Registry of Communication Operators). Furthermore, further violations could be found in the handling of contact lists purchased from external providers. Finally, security measures for the management of customer data were also considered inadequate.

Юридические цитаты

Art. 5 (1)Art. 6 (1)Art. 7Art. 15 (1)Art. 16Art. 21Art. 24Art. 25 (1)Art. 32Art. 33

Проблемы и нарушения

Non-compliance with general data processing principles

Будьте в курсе событий, связанных с соблюдением конфиденциальности

Мы уважаем вашу конфиденциальность. Одно письмо в месяц, без спама, отказ от подписки в любое время.