[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv_xLfT_QVuHLcL2_Iu5MgQCkXzEJwgiwjM68dKyMQk8":3},{"article":4,"iocs":44,"watch_terms":45,"solutions":46,"lesson":130},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"18ccec19-9fbb-44e2-b6e2-4ceec2f182f9","Garante per la protezione dei dati personali (Italy) - 710\u002F2026","garante-per-la-protezione-dei-dati-personali-italy-710-2026-931ed2","Created page with \"{{DPAdecisionBOX |Jurisdiction=Italy |DPA-BG-Color= |DPAlogo=LogoIT.png |DPA_Abbrevation=Garante per la protezione dei dati personali |DPA_With_Country=Garante per la protezione dei dati personali (Italy) |Case_Number_Name=710\u002F2026 |ECLI= |Original_Source_Name_1=Garante per la protezione dei dati personali |Original_Source_Link_1=https:\u002F\u002Fwww.garanteprivacy.it\u002Fweb\u002Fguest\u002Fhome\u002Fdocweb\u002F-\u002Fdocweb-display\u002Fdocweb\u002F10302112 |Original_Source_Language_1=Italian |Original_Source_L...\" Show changes","Italy's Garante per la protezione dei dati personali has issued a €7,000,000 fine to IQVIA Solutions Italy S.r.l. following a data breach that exposed the personal information of 3,780 patients. The investigation revealed unlawful processing due to a lack of understanding of GDPR obligations, inadequate data protection by design, and the absence of a Data Protection Impact Assessment (DPIA).","Italy's Garante fines IQVIA €7M for GDPR violations after patient data breach.","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=Garante_per_la_protezione_dei_dati_personali_(Italy)_-_710\u002F2026&diff=53370&oldid=0","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002Fe\u002Fec\u002FLogoIT.png","2026-10-12T11:09:39+00:00","2026-10-12T12:00:19.665245+00:00",8,[17,20],{"name":18,"type":19},"IQVIA","vendor",{"name":21,"type":22},"GP software","product","53f9c4b6-8bc6-4964-9169-d09e5cd41d72",{"id":23,"icon":25,"name":26,"slug":27},null,"Compliance","compliance",[29,34,39],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":40},{"id":41,"icon":25,"name":42,"slug":43},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18,21],{"controls":47,"vendors":129},[48,77,103],{"slug":49,"name":50,"problem":51,"products":52},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",[53,61,69],{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-cloud","Cortex Cloud","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcloud","Cloud security platform covering posture management and runtime protection.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-cloud-security","Falcon Cloud Security","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fcloud-security\u002F","Cloud posture management and workload protection.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-cloud","Microsoft Defender for Cloud","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fcloud-security\u002Fmicrosoft-defender-cloud","Cloud posture management and workload protection for Azure, AWS and Google Cloud.",{"slug":78,"name":79,"problem":80,"products":81},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[82,87,95],{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":83,"product_name":84,"url":85,"description":86},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"slug":104,"name":105,"problem":106,"products":107},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[108,116,124],{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":125,"product_name":126,"url":127,"description":128},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",[],{"slug":131,"title":132,"body":133,"framework_refs":134,"framework_notes":146},"iqvia-fined-7m-for-gdpr-failures-after-patient-data-breach","IQVIA Fined €7M for GDPR Failures After Patient Data Breach","IQVIA Solutions Italy faced a €7,000,000 fine after a breach exposed the personal data of 3,780 patients, stemming from a fundamental misunderstanding of GDPR obligations and a failure to embed data protection into its processes from the outset. The absence of a Data Protection Impact Assessment (DPIA) — a legally required safeguard for high-risk processing activities — meant that risks to patient data were never formally identified or mitigated. Inadequate data protection by design indicates that privacy considerations were treated as an afterthought rather than a core architectural principle. This case illustrates that regulatory non-compliance is not merely a paperwork issue; it directly enables real harm to real individuals and exposes organisations to severe financial and reputational consequences.",[135,136,137,138,139,140,141,142,143,144,145],"GDPR Article 25 – Data Protection by Design and by Default","GDPR Article 35 – Data Protection Impact Assessment","GDPR Article 83 – General conditions for imposing administrative fines","GDPR Article 5 – Principles relating to processing of personal data","NIST Privacy Framework PR.PO-P1 – Policies, processes, and procedures","NIST SP 800-53 PT-2 – Authority to Process Personally Identifiable Information","NIST SP 800-53 RA-3 – Risk Assessment","CIS Control 3 – Data Protection","CIS Control 14 – Security Awareness and Skills Training","ISO\u002FIEC 27701 – Privacy Information Management","ITIL Service Design – Risk Management and Compliance",{}]