Italy fines Intesa Sanpaolo 18 mln euros for illicit processing of customer data

Core Viewpoint - Italy's data protection authority has fined Intesa Sanpaolo 17.6 million euros for the illicit processing of customer data affecting approximately 2.4 million clients [1] Group 1: Fine Details - The fine was imposed due to the bank's unilateral transfer of customer data to its digital unit, Isybank [1] - The authority noted that the bank profiled clients based on age, digital usage frequency, and financial holdings, leading to potential negative consequences for customers [1] Group 2: Communication Issues - The communication regarding the data migration was deemed inadequate, with important information often sent during the summer and placed in the app's archive section without push alerts [1] Group 3: Considerations for the Fine - In determining the fine amount, the agency considered the large number of affected customers, the bank's non-intentional conduct, and its cooperation during the investigation [1]