The Italian Data Protection Authority (the Garante) issued its first GDPR fine on, among others, the unlawful retention of metadata from employees’ emails and web browsing activities applying in Italy for the first time its highly discussed guidelines of 2024 on the use of metadata in workplace email systems.
In a recent and thought-provoking decision, the Italian Data Protection Authority (Garante) sanctioned a securitization Special Purpose Vehicle (SPV) for failing to comply with several GDPR requirements — most notably, for not appointing a Data Protection Officer (DPO).
Businesses relying on broad and generalized consents for marketing activities face a significant risk following a recent ruling by the Data Protection Authority (the Garante) in Italy.
