Poste Italiane and Postepay (€12.5M)

Regulator: Garante per la protezione dei dati personali. Jurisdiction: Italy. GDPR enforcement. Italy’s data protection authority fined Poste Italiane 6,624,000 euros and Postepay 5,877,000 euros for embedding device-surveillance software in banking apps and making consent to it a condition of…