The Italian privacy authority (DPA) issued a decision introducing more stringent obligations for the transfer of data to call centers located in countries outside of the European Union such as India or the US, but also Albania that is very close to Italy and is a popular place for call centers of Italian companies.…
The Italian Data Protection Authority issued direct marketing data protection guidelines aimed at setting out general regulations on privacy-related obligations concerning direct marketing practices and against spamming initiatives which provide very interesting insights.
Time to speed up privacy compliance …
The Italian Data Protection Authority (DPA) after a long consultation has finally published its decision on the measures to be taken in case of data breaches by telecom and Internet operators implementing the Directive 2009/136/CE. Telephone and internet service providers shall notify the DPA of any breach of personal data stored in…
Apps for smart phones and tablets collect a large number of information about users. This is why the European Article 29 Working Party issued an opinion on the obligations to be met in the processing of such information applicable to both European and worldwide entities.
The Italian Data Protection Authority (DPA) has run an inspection on 11 telephony and Internet service providers as to the term and modalities of retention of traffic data. As a general principle, personal data cannot be retained for longer than the term necessary for the purpose for which they have been collected.…
The Italian Data Protection Authority held that data protection obligations in case of performance of marketing, advertising and commercial activities still apply to data of companies and associations. The problem had arisen since in 2011 the Italian Government had removed from the definition of "personal data" and "data subjects" for the…
The Italian data protection authority issued a decision against a company that had adopted a video survaillance system also allowing the audio survaillance of employees of a call center. Indeed, the Italian Worker's Bill of Rights prohibits tools aimed at the remote monitoring of workers which can be allowed only if required by…
The delivery of newsletters without the individuals' prior consent has been sanctioned with 9 months of imprisonment by the Italian Court of Cassation. Article 167 of the Italian Data Protection Code punishes with the imprisonment between 6 months and 24 months the processing of personal data without the consent of the data subject (and other privacy breaches) with either…
The Italian Data Protection Authority has published guidelines on the processing of personal data on health-related websites which provide stringent requirements. Websites, forum, blogs but even social networks that are dedicated to health-related issues provide advice, exchange of information and contain comments from users that in some cases can reveal very sensitive data about their…