Database transfer without adequate information and consent: sanctions may be doubled.
With the judgment n. 18619 dated 27th July 2017, the Supreme Court of Cassation addressed the matter of a database transfer containing personal data without the provision of adequate information to and the consent by the data subjects. The Court has therefore confirmed that the aggravating set forth by art. 164 bis of the Legislative Decree n. 196/2003 is applicable notwithstanding the actual usage of the data acquired.