Back Therecord.Media

Italian regulator fines national postal service orgs $15 million for data privacy violations

Therecord.Media • April 20, 2026

The regulator fined Poste Italiane SpA, the postal service provider, €6.6 million ($7.8 million) and Postepay SpA, a digital payments subsidiary, €5.9 million ($7 million) for allegedly illegally processing millions of users’ personal data.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Italian Postal Service Fined $15 Million for Data Privacy Violations The Italian Data Protection Authority has fined Poste Italiane S.p.A. €6,624,000 ($7.8 million) and Postepay S.p.A. €5,877,000 ($7 million) for unlawfully processing personal data of millions of users. The investigation, initiated in April 2024, revealed that the BancoPosta and Postepay apps engaged in excessively invasive practices that interfered with user privacy, which were not essential for fraud prevention. The fines were imposed due to numerous complaints regarding these practices. The total fine amounts to approximately €12.5 million ($15 million). The ruling highlights ongoing concerns about data privacy compliance among financial service providers in Italy. Current status indicates that both companies are reviewing the ruling and may consider an appeal. 3 sources 37

Extracted Entities

Companies (2)

Poste Italiane SpA Postepay SpA