Italian regulator fines national postal service orgs $15 million for data privacy violations

Italy’s data protection authority fined Poste Italiane (€6.6M) and Postepay (€5.9M) a total of €12.5M, alleging their Postepay and BancoPosta apps performed excessively invasive monitoring of users’ mobile devices (including installed and running apps) purportedly to detect malware, while failing to provide adequate notice, safeguards, and appropriate data retention.