Servizio Idrico Integrato S.c.p.a. – €15,000 Fine (Italy, 2022)

€15,000Garante per la protezione dei dati personali6 October 2022Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Italy's data protection authority fined Servizio Idrico Integrato S.c.p.a. EUR 15,000 for not securing personal data on its website. The company failed to use an SSL form, which is important for protecting user information. This case highlights the need for businesses to implement proper security measures to keep customer data safe.

What happened

Servizio Idrico Integrato S.c.p.a. processed personal data on its website without using an SSL form for security.

Who was affected

Website visitors whose personal data was processed by Servizio Idrico Integrato's website.

What the authority found

The authority found that the company did not take necessary steps to protect personal data, violating GDPR's security requirements.

Why this matters

This ruling emphasizes the importance of website security for all businesses. Companies should ensure they use SSL certificates to protect user data and comply with data protection rules.

GDPR Articles Cited

Art. 32(GDPR)
Art. 5(1)(f) GDPR
Full Legal Summary
Detailed

The Italian DPA has fined Servizio Idrico Integrato S.c.p.a. EUR 15,000. The controller had operated a website where personal data was being processed without using an SSL form. The DPA found that the use of an SSL form would have been necessary for the security of the data. It therefore concluded that the controller had failed to implement appropriate technical and organizational measures to protect personal data.

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for Servizio Idrico Integrato S.c.p.a. in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

6 October 2022

Authority

Garante per la protezione dei dati personali

Fine Amount

€15,000

Enforcement Tracker ID

ETid-1462

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Servizio Idrico Integrato S.c.p.a. - Italy (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: