- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Ubi Banca spa – €100,000 Fine (Italy, 2021)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Ubi Banca spa was fined for sending a letter that could reveal sensitive financial information about a customer. The envelope's wording raised privacy concerns, even though the letter itself contained no payment reminders. This case highlights the importance of protecting customer information in all communications.
What happened
Ubi Banca spa sent a letter with an envelope that indicated 'anomalous credit Chieti', potentially exposing sensitive information.
Who was affected
A customer who received the letter from Ubi Banca spa.
What the authority found
The authority ruled that Ubi Banca violated principles of lawfulness and transparency by potentially disclosing sensitive information through the envelope's wording.
Why this matters
This case serves as a reminder for companies to be cautious about how they communicate with customers, ensuring that no sensitive information is inadvertently revealed.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 10 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 100,000 on Ubi Banca spa (now Intesa Sanpaolo spa). A data subject had filed a complaint with the DPA for receiving a letter from the controller, with the envelope stating 'anomalous credit Chieti'. However, the letter did not contain payment reminders but only information about the transparency of banking and financial services. For this reason, the DPA found that the controller had violated the principles of lawfulness and transparency as well as the principle of data minimization. After all, the term on the envelope could enable third parties to obtain information about the recipient's financial situation, regardless of the contents in the envelope.
Related Enforcement Actions (0)
No other enforcement actions found for Ubi Banca spa in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
16 December 2021
Authority
Garante per la protezione dei dati personali
Fine Amount
€100,000
About this data
Cite as: Cookie Fines. Ubi Banca spa - Italy (2021). Retrieved from cookiefines.eu
Last updated: