On November 18, 2015, the DPA issued a decision (source document in Italian) ordering an e-commerce company to cease its illicit use of personal data belonging to more than 300,000 people. The company profiled customers' online habits, preferences, and purchase history in order to send them personalized newsletters. The DPA stated that such activity will be deemed lawful only if the company sends prior notification to the DPA and sets forth a limited retention period for the data.
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
