ITGarante17 April 2026GDPR
Poste Italiane S.p.a. e PostePay S.p.a.
Poste Italiane and PostePay fined by Garante EUR 6,624,000 for unlawful data processing.
EUR€6,624,000
Summary
Poste Italiane S.p.a. and PostePay S.p.a. were sanctioned for unlawful processing of personal data in their Bancoposta and PostePay apps on Android devices. The apps required users to authorize access to data to detect malicious software, which breached GDPR principles.
Grounds for the decision
Unlawful processing in Android apps by requiring access to users’ data.