Acqua Novara.VCO S.p.a. – €20,000 Fine (Italy, 2022)

€20,000Garante per la protezione dei dati personali21 July 2022Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Acqua Novara.VCO S.p.a. was fined EUR 20,000 in Italy for improperly sharing personal data with Clio S.r.l. The company did not have a valid reason for allowing Clio to collect and store whistleblowing data. This case serves as a reminder to companies to carefully manage data sharing agreements.

What happened

Acqua Novara.VCO S.p.a. was fined for sharing personal data with Clio S.r.l. without a valid legal basis.

Who was affected

Individuals whose data was shared through the whistleblowing application managed by Clio.

What the authority found

The Italian DPA found Acqua Novara violated GDPR by allowing Clio to collect and store data without a valid legal basis.

Why this matters

This ruling underscores the need for companies to ensure they have proper agreements and legal bases in place when sharing personal data. It highlights the risks of inadequate data management in partnerships.

GDPR Articles Cited

Art. 2-ter Codice della privacy GDPR
Art. 6 GDPR
Art. 28 GDPR
Art. 5(1)(a) GDPR
Full Legal Summary
Detailed

The Italian DPA has imposed a fine of EUR 20,000 on Acqua Novara.VCO S.p.a.. The fine is related to the fine against Clio S.r.l.. Clio provides and manages a whistleblowing reporting application for various private and public entities, including, Acqua Novara. During its investigation, the DPA found that Acqua Novara provided personal data to Clio in connection with whistleblowing reports, allowing Clio to collect and store them without a valid legal basis. Furterhmore, the DPA found that the Acqua Novara had not adequately regulated its relationship with Clio.

Related Enforcement Actions (0)

No other enforcement actions found for Acqua Novara.VCO S.p.a. in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

21 July 2022

Authority

Garante per la protezione dei dati personali

Fine Amount

€20,000

Enforcement Tracker ID

ETid-1465

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Acqua Novara.VCO S.p.a. - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: