Skip to content Skip to sidebar Skip to footer
Spamming Sanctioned with Criminal Penalties
The delivery of newsletters without the individuals' prior consent has been sanctioned with 9 months of imprisonment by the Italian Court of Cassation.  Article 167 of the Italian Data Protection Code punishes with the imprisonment between 6 months and 24 months the processing of personal data without the consent of the data subject (and other privacy breaches) with either…
Health-related Websites & Privacy: Need to Know!
The Italian Data Protection Authority has published guidelines on the processing of personal data on health-related websites which provide stringent requirements. Websites, forum, blogs but even social networks that are dedicated to health-related issues provide advice, exchange of information and contain comments from users that in some cases can reveal very sensitive data about their…
New Privacy Obligations for Banks
The Italian Data Protection Authority has now introduced new relevant data protection obligations for banks. Indeed banks subject to Italian data protection law shall, among others,: 1. Communication of personal data within a group of banks Banks will be able to transfer customers' personal data to other banks of the same group only with the prior consent of the relevant customers,…
EU Cookies Directive: Deadline Expired!
It expires today the deadline for the implementation of the so called EU Cookies Directive 2009/136/EC amending, among others, the ePrivacy Directive 2002/58/EC setting out specific privacy-related regulations governing the electronic communications sector. The provision of the EU Cookies Directive that is leading to the most relevant discussions concerns the obligation to…
Stricter Privacy Rules in the Communications Sector
Following a number of discussions on the topic, the revised version of the  ePrivacy Directive governing the processing of personal data and the protection of privacy in the electronic communications sector will be shortly adopted by the European Commission. The current proposal prescribes:  Mandatory Notification of Personal Data Breaches: communications providers and…