Article summary
MLex has reported that Intesa Sanpaolo has been fined €100,000 by the Italian Data Protection Authority (DPA), for a violation of the EU’s General Data Protection Regulation, Regulation (EU) 2016/679 (EU GDPR) by erstwhile company UBI Banca. A man had complained that he received an envelope from UBI Banca with ‘credit recovery’ written on it, which therefore revealed the nature of the contents, the regulator said. Such methods of shipping correspondence violated the principles of data minimisation, lawfulness, fairness and transparency, the DPA said.
To continue reading this news article, as well as thousands of others like it, sign in with LexisNexis or register for a free trial