The Italian Data Protection Authority issued an administrative fine of €5,508,000 against BBVA's Italian branch for failing to honor a customer's right to object to direct marketing. The violation lasted seven months, during which the customer received at least ten unsolicited notifications despite having objected via the bank's app and customer service.
Why it matters: The fine underscores the obligation of controllers to promptly respect data subject objections and implement effective technical measures.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
