VGS corporate lawyers
London

+44 2039665531

Milan

+39 0250043613

  • Home
  • Who we are
  • Practice Areas
    • Company law
      • Setting up a company in Italy
      • Corporate governance
      • Bankruptcy
    • Debt Recovery & Credit Collection
    • Arbitration and Mediation
    • Contracts
      • Acquisition Finance
    • White collar crimes
    • Data protection and GDPR
    • Professional Negligence
      • Medical Malpractice
  • People
    • Avv. Valentina Giarrusso
    • Avv. Flavia Di Pilla
    • Avv. Silvia Pellegrini
    • Avv. Giuseppe Ganci
    • Avv. Valentina Improta
    • Dr. Fabrizio Di Patti
    • Avv. Salvatore Fasciana
    • Dr. Yasine Ajlane
  • News & Blog

General Data Protection Regulation Fines and Penalties – Italy

  • by VGS' Editorial Board
  • 3 July 2019
  • Comments (0)

One year after GDPR entered into force, it is possible to observe first penalties and fines imposed by different Data Protection Authorities to several undertakings and institutions. This brief analysis is useful to provide insights and clarifications over possible misapplications of GDPR and related consequences. 

Country: Italy | Industry: Media | Company/Institution: Facebook Italy S.r.l. | Non-Compliance: Lack of consent – Misuse of personal data –  

The Italian Data Protection Authority (“Garante della Privacy”) has issued Facebook Italy S.r.l. with a €1 Million fine for the infringement of Italian Privacy Laws in relation to the infamous Cambridge Analytica case. 

Cambridge Analytica was a British consulting firm involved in data mining, data brokerage, and data analysis. In 2018, media have reported Cambridge Analytica business practices displaying that the company had acquired and exploited personal data of Facebook users obtained from an external application who told Facebook it was collecting it for academic purposes. The personal data of around 87 Million of Facebook users were acquired using a third-party app called “This is your digital life”. In particular, users who gave the app the permission to acquire their data also gave the app access to information of all users’ friends network. 

Such infringement took place prior to Europe new GDPR. Subsequently, the fine has been imposed based on the former Italian Privacy Code. More precisely, it has been found that Facebook Ireland and Facebook Italy have infringed art. 4, section I (F) and article 28 of Privacy Code. 

The Garante established that 57 Italians downloaded “This is your digital life” app via Facebook login feature thanks to which the app the app acquired data relating to further 214,077 Italian Users that:

  1. Did not download the app in question;
  2. Had not been informed of the sharing of their data;
  3. Had not given any consent to such sharing.

Facebook opted to pay a reduced amount of €52.000 hoping to settle the matter. However, considering the scale of violation of personal data and related consent, the Garante has disqualified the case for a reduced payment.

For further information please contact us or leave your contact details in the Contact Form and you will be contacted within 24 hours.

Source: www.garanteprivacy.it

  • GDPR
  • Share:
Previous Article: The non-competition agreement
Next Article Privacy and Artificial Intelligence: concerns and opportunities

Practice Areas

  • Company law
    • Bankruptcy
  • Debt Recovery & Credit Collection
  • Arbitration and Mediation
  • Contracts
    • Acquisition Finance
  • White collar crimes
  • Data protection and GDPR
  • Professional Negligence
    • Medical Malpractice

Free Consultation

    Tags

    ADR Airbnb Arbitration Auditing Brexit Company Law Company Shares Consent Contracts Cookies Copyright Coronavirus Data DataProcessing Data Protection DPO European Union Eviction Free Title GDPR HealtData HouseHold Agreements Italian Bankruptcy Law Italian Business Italian Company Law Italian Corporate Law Italian Criminal Law Italian Debt Recovery Italian Entry Visa Italian Incorporation Italian Intellectual Property Law Italian Legal Advice Italian Privacy Italian Tax Legal guide MedialTreatment Mediation Partnership Patient Personal Data Privacy Processing Research Warranty White Collar Crimes

    Social Links

    • Facebook
    • Instagram
    • LinkedIn

    See also:

    VGS Lawyers

    VGS - Family Lawyers

    © Copyright 2022 | VGS Corporate Lawyers | All right reserved.