Italian DPA fines UniCredit $3M over data breach GDPR lapses
By 
Kyle Brasseur2024-03-11T15:54:00
The Italian data protection authority, Garante, announced a fine of 2.8 million euros (U.S. $3 million) against UniCredit for alleged violations of the General Data Protection Regulation (GDPR) regarding insufficient security measures the bank had in place during a cyberattack.
The penalty, assessed in February but revealed by Garante in a translated newsletter Thursday, came in response to a 2018 data breach at UniCredit that exposed the information of hundreds of thousands of customers.
UniCredit said in an emailed statement it would challenge the regulator’s decision.
Related articles
-
News BriefSpanish DPA dings retailer Uniqlo $294K over GDPR violations
Spain’s data protection authority fined retailer Uniqlo Europe 270,000 euros (U.S. $294,000) over admitted violations of the European Union’s General Data Protection Regulation.
-
News BriefCzech DPA fines Avast $15M over GDPR violations
The Czech Republic’s data protection authority issued a fine of 351 million Czech koruna (U.S. $15 million) against antivirus software vendor Avast for alleged violations of the General Data Protection Regulation.
-
News BriefAT&T: Data leak exposed info of 73M customers onto dark web
AT&T said personal account data on approximately 73 million current and former customers was released on the dark web two weeks ago but has not yet identified when and where the breach occurred.
More from Regulatory Enforcement
-
News BriefJudge reinstates fired CPSC commissioners in latest battle over government cuts
In May, three commissioners for the Consumer Product Safety Commission were abruptly fired by President Donald Trump and sued for their jobs shortly after. A federal judge has ruled that the commissioners should be reinstated, although it’s unclear whether that ruling may itself be reversed.
-
PremiumUK’s Failure to Prevent Fraud law may expose firms to unlimited fines and prosecution, says Moody’s compliance risk expert
Fraud now accounts for around 40% of all crime in the U.K., posing a major problem for banks and consumers. Ted Datta, head of industry practice for financial crime compliance at Moody’s, warns that the risk is growing fast.
-
ArticleCrypto firms brace for tighter UK oversight as FCA plots integration with financial markets
Trying to put rules in place to oversee an industry that has grown largely outside of regulation is not without serious challenges. But the UK’s Financial Conduct Authority’s (FCA) latest consultation aims to attract industry views about how some key aspects of crypto trading should be regulated ahead of planned ...