On 10 March, the Italian Data Protection Authority issued sanctions of over 11 million euros to five companies for illegal use of personal data. It is the highest data protection fine ever issued in Europe.
The data breach was discovered during a financial police investigation of suspected money laundering activities by a multinational company, Sigue Global service limited and other organisations.
According to the Garante, the companies attributed money transfers to China to more than a thousand customers whose personal data was used illegally.
The amount of the fine was 5,88 million euros for the multinational company and respectively 1,59M, 1,26M, and 850 000 euros for the other companies.
Italian DPA : 11 million euros fine for five companies