Recent decisions of the Italian Data Protection Authority regarding data breach: fines to UniCredit
In two decisions dated 8 February 2024, related to the same data breach occurred in 2018, the Italian Data Protection Authorithy imposed a fine of Eur 2.8 million on Unicredit, the data controller, and a fine of Eur 800,000 on NTT Data, the data processor, a company to which the bank had outsourced the performance of testing on the security measures.