- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Acqua Novara.VCO S.p.a. – €20,000 Fine (Italy, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Acqua Novara.VCO S.p.a. received a fine of EUR 20,000 for sharing personal data with Clio without a valid legal basis. This matters because it highlights the importance of having proper agreements in place when sharing data with service providers. Companies must ensure they comply with data protection rules to avoid penalties.
What happened
Acqua Novara.VCO S.p.a. was fined for providing personal data to Clio without a valid legal basis.
Who was affected
Individuals whose personal data was shared with Clio through whistleblowing reports were affected.
What the authority found
The Italian DPA found that Acqua Novara failed to have a valid legal basis for processing personal data, violating GDPR requirements.
Why this matters
This case emphasizes the need for companies to establish clear data-sharing agreements with service providers. It serves as a reminder that businesses can be held accountable for how they manage personal data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 20,000 on Acqua Novara.VCO S.p.a.. The fine is related to the fine against Clio S.r.l.. Clio provides and manages a whistleblowing reporting application for various private and public entities, including, Acqua Novara. During its investigation, the DPA found that Acqua Novara provided personal data to Clio in connection with whistleblowing reports, allowing Clio to collect and store them without a valid legal basis. Furterhmore, the DPA found that the Acqua Novara had not adequately regulated its relationship with Clio.
Related Enforcement Actions (0)
No other enforcement actions found for Acqua Novara.VCO S.p.a. in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
21 July 2022
Authority
Garante per la protezione dei dati personali
Fine Amount
€20,000
About this data
Cite as: Cookie Fines. Acqua Novara.VCO S.p.a. - Italy (2022). Retrieved from cookiefines.eu
Last updated: