- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Intesa Sanpaolo Vita S.p.a. – €20,000 Fine (Italy, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Intesa Sanpaolo Vita S.p.a. was fined for disclosing personal data of a life insurance policyholder without authorization. An employee's mistake led to this unauthorized sharing of sensitive information. This case highlights the need for companies to train their staff on data protection to prevent similar incidents.
What happened
Intesa Sanpaolo Vita S.p.a. was fined EUR 20,000 for unauthorized disclosure of personal data to third parties.
Who was affected
A life insurance policyholder whose personal data was disclosed without permission was affected.
What the authority found
The authority found that the company violated Articles 5(1) a) and f) of GDPR due to the unauthorized sharing of personal data.
Why this matters
This ruling serves as a reminder for companies to implement strict data handling protocols and provide training to employees to avoid unauthorized disclosures.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has fined Intesa Sanpaolo Vita S.p.a. EUR 20,000. The data subject, who had taken out a life insurance policy with the controller, had filed a complaint with the DPA against the controller for the unauthorized disclosure of their personal data. In the course of its investigation, the DPA found that the controller had disclosed personal data, such as first name, last name and information about the policy, to third parties without authorization. The unauthorized disclosure had occurred due to an employee's error.
Related Enforcement Actions (0)
No other enforcement actions found for Intesa Sanpaolo Vita S.p.a. in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
7 July 2022
Authority
Garante per la protezione dei dati personali
Fine Amount
€20,000
About this data
Cite as: Cookie Fines. Intesa Sanpaolo Vita S.p.a. - Italy (2022). Retrieved from cookiefines.eu
Last updated: