- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Benetton Group S.r.l. – €240,000 Fine (Italy, 2023)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Benetton Group S.r.l. was fined €240,000 for storing customer data indefinitely and failing to secure employee data. The Italian DPA found that the company did not implement adequate measures to protect personal information. This case highlights the need for businesses to manage customer data responsibly and securely.
What happened
Benetton Group S.r.l. was fined for storing customer data indefinitely and not securing employee data properly.
Who was affected
Customers and employees whose data was improperly stored and accessed were affected.
What the authority found
The Italian DPA ruled that Benetton Group S.r.l. violated GDPR by failing to implement appropriate data protection measures.
Why this matters
This ruling stresses the importance of data security and responsible data management for businesses. Companies must adopt strong protective measures to safeguard personal information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 10 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 240,000 on Benetton Group S.r.l.. The controller had stored a large amount of customer data indefinitely. The DPA also found that the administrative database of employees of stores from 7 countries were accessible with a single password. The DPA considered this to be a breach of the obligation to implement appropriate technical and organizational measures to protect personal data. In assessing the fine, the DPA considered the fact that a very large number of people were affected by the data protection violations as an aggravating factor.
Related Enforcement Actions (0)
No other enforcement actions found for Benetton Group S.r.l. in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
27 April 2023
Authority
Garante per la protezione dei dati personali
Fine Amount
€240,000
About this data
Cite as: Cookie Fines. Benetton Group S.r.l. - Italy (2023). Retrieved from cookiefines.eu
Last updated: