A huge fine of €27,8 million was issued to the Italian telecom company TIM. The Italian Data Protection Authority (Garante) revealed that TIM was fined due to numerous unlawful data processing activities related to marketing and advertising, which included unsolicited promotional calls and prize competitions in which data subjects were entered without consent.One of the reasons for the large fine was the fact that the unlawful data processing activities involved several million individuals. One individual, for example, was called a total of 155 times in a month while TIM refused to add the affected individual on a no-call list even after several requests. The DPA determined that the company lacked control over the call centers and did not have adequate measures to add people to no-call lists.TIM also did not provide accurate and detailed enough privacy policies and data processing policies, and as such consumers were not efficiently informed about the data collected and processed. The company's management of data breaches was also not efficient according to Garante.Besides the fine, Garante also imposed 20 corrective measures according to Art. 58(2) GDPR which prohibits TIM from processing marketing-related data of those individuals who have refused to receive promotional calls, individuals who asked to be blacklisted and individuals who are not clients of TIM.The company was also forbidden from using customer data collected from the "My Tim", "Tim Personal" and "Tim Smart Kid" apps.
a huge  of  million was issued to the italian telecom company tim the italian data protection authority garante revealed that tim was  due to numerous unlawful data processing activities related to marketing and advertising which included unsolicited promotional calls and prize competitions in which data subjects were entered without consentone of the reasons for the large  was the fact that the unlawful data processing activities involved several million individuals one individual for example was called a total of times in a month while tim refused to add the affected individual on a nocall list even after several requests the dpa determined that the company lacked control over the call centers and did not have adequate measures to add people to nocall liststim also did not provide accurate and detailed enough privacy policies and data processing policies and as such consumers were not efficiently informed about the data collected and processed the companys management of data breaches was also not efficient according to garantebesides the  garante also imposed corrective measures according to   which prohibits tim from processing marketingrelated data of those individuals who have refused to receive promotional calls individuals who asked to be blacklisted and individuals who are not clients of timthe company was also forbidden from using customer data collected from the my tim tim personal and tim smart kid apps
 huge    million  issue   italian telecom company tim  italian data protection authority garante reveal  tim   due  numerous unlawful data process activities relate  market  advertise  include unsolicited promotional call  prize competitions   data subject  enter without consentone   reason   large    fact   unlawful data process activities involve several million individuals one individual  example  call  total  time   month  tim refuse  add  affect individual   nocall list even  several request  dpa determine   company lack control   call center     adequate measure  add people  nocall liststim also   provide accurate  detail enough privacy policies  data process policies    consumers   efficiently inform   data collect  process  company management  data breach  also  efficient accord  garantebesides   garante also impose corrective measure accord     prohibit tim  process marketingrelated data   individuals   refuse  receive promotional call individuals  ask   blacklist  individuals    clients  timthe company  also forbid  use customer data collect    tim tim personal  tim smart kid apps