ITALIAN DPA FINES BENETTON FOR 240,000 EUROS.
With an injunction order, the Italian Data Protection Authority fined the Benetton company for breaching some principles of the GDPR regarding data retention, minimization, and technical and organizational security measures.
The Italian Data Protection Authority (“Garante” or “DPA”) fined the Benetton company for certain violations regarding privacy regulations. During the inspection, which began in 2019, a number of irregularities were found on the websites and in the management of customer data, both for fidelity card and promotional purposes.
During a subsequent inspection, in 2021, to verify the implementation of additional security measures and the correction of the alleged violations, the Garante found additional circumstances, related to the retention of customer data indefinitely as well as the lack of security measures related to fidelity programs and the platform provided to retail stores.
