Failure to take the measures provided for under the GDPR is comparable to the “fault on the organisation’s side” under Legislative Decree No. 231/2001
The Court of Cassation, with order No. 18292 issued on 3 September 2020, has pointed out that failure to arrange the relevant technical and organisational measures safeguarding the…