The Privacy Authority has ordered the provisional blocking of the processing of personal data against the Company that manages the…app…Mitiga Italia.
The app was used for the first time on 19 May last to allow the entry to the final of the Italian Cup of spectators in possession of certification attesting to vaccination, healing or the state of negativity from the Covid-19.
The measure of the Privacy Guarantor became necessary because it emerged the possibility that the app, in the next few days, could be used to govern access to other events and shows or other sporting initiatives.
In its provision, the Privacy Supervisor has underlined that there is currently no valid legal basis for the processing of data, even particularly sensitive such as those of a health nature, carried out through the app and aimed at ascertaining the situation
Finally, having submitted the application to the Authority on 1 April, Mitiga should have refrained from any data processing, since the time provided for in the Regulation for the taking of a decision by the same Authority was not over.
The blocking issued by the Data Protection Supervisor shall take effect immediately and shall continue for as long as necessary to allow the Authority to define the investigation initiated.