Italy: Data Protection Authority investigation into Lusha Systems over alleged unauthorised processing of contact data
Progress
Current status
in force
14 Jul 2026 in force
08 Apr 2025 under deliberation
Scope
Implementers
Italy
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
software provider: other software
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Data Protection Authority fined Lusha Systems EUR 2 million for unauthorised processing of contact data
On 14 July 2026, the Data Protection Authority (DPA) fined Lusha Systems EUR 2 million for the unlawful processing of contact data. The DPA found that the company had processed the personal data of a large number of individuals residing in Italy, in…
Event type
investigation
Action type
ruling
Government branch
executive
Government body
data protection authority
Data Protection Authority opened investigation into Lusha Systems over alleged unauthorised processing of contact data
On 8 April 2025, the Italian Data Protection Authority announced an investigation into Lusha Systems over the unauthorised processing of contact data. The investigation focuses on concerns that it collects and sells personal contact details, includi…
Event type
investigation
Action type
announcement
Government branch
executive
Government body
data protection authority