Enforcing jurisdiction
Italy · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Servizio Idrico Integrato S.c.p.a. – €15,000 Fine (Italy, 2022)

€15,000Garante per la protezione dei dati personali6 October 2022Italy
final
ePrivacy
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Servizio Idrico Integrato S.c.p.a. was fined EUR 15,000 for not using secure methods to protect personal data on its website. This matters because it highlights the need for businesses to implement proper security measures. Companies should ensure their websites are secure to protect user information.

What happened

The company operated a website that processed personal data without using SSL encryption.

Who was affected

Users whose personal data was processed on the company's website were affected.

What the authority found

The Italian DPA found that the company failed to implement necessary security measures to protect personal data.

Why this matters

This ruling stresses the importance of website security in data protection. It encourages businesses to adopt secure practices to safeguard personal information.

Recorded legal citations
Automatically processed
Art. 32 GDPR
Art. 5(1)(f) GDPR
Art. 25(1) GDPR
Art. 58(2)(i) GDPR
Art. 83(3) GDPR
View original scraped data
Art. 5(1)(f) GDPR
Art. 25(1) GDPR
Art. 32(GDPR)
Art. 58(2)(i) GDPR
Art. 83(3) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 13 March 2026.

Processing notes: scope corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Italian DPA has fined Servizio Idrico Integrato S.c.p.a. EUR 15,000. The controller had operated a website where personal data was being processed without using an SSL form. The DPA found that the use of an SSL form would have been necessary for the security of the data. It therefore concluded that the controller had failed to implement appropriate technical and organizational measures to protect personal data.

Related Enforcement Actions (0)

No other enforcement actions found for Servizio Idrico Integrato S.c.p.a. in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

6 October 2022

Authority

Garante per la protezione dei dati personali

Fine Amount

€15,000

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Servizio Idrico Integrato S.c.p.a. - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: