The Italian data protection authority issued a € 2.6 million GDPR fine against, Foodinho, the Italian company of the Glovo group, for privacy violations committed through the algorithm of the rider management App.
The Swedish data protection authority issued a GDPR fine for lack of adequate protection of sensitive data stored in an American cloud platform after the Schrems II decision.
The Danish privacy authority issued a fine against a hotel chain of approximately € 148K for breach of the data retention principle for data of its customers.
A call center faced € 2 million privacy fine from the Italian data protection authority for lack of provision of a privacy information notice and collection of consent.
The first GDPR fine was issued in Italy by the Garante for the lack of implementation of privacy security measures following a data breach on the so-called Rousseau platform operating the websites of the Movimento 5 Stelle party.
The relevance of a GDPR fine have been tested for the first time in Germany following a data breach which creates an interesting precedent for other jurisdictions.
