Italian Data Protection Authority Investigates Lusha Over Alleged Privacy Breaches

Key Takeaways

• Investigation Launched: The Italian Personal Data Protection Authority has initiated an investigation into Lusha Systems Inc. over potential violations of data privacy laws involving Italian residents’ personal data.
• Concerns Over Data Use: The investigation follows complaints from individuals who received unsolicited calls, suggesting that their data may have been sourced from Lusha’s platform without proper consent.
• Request for Information: The Italian authority has demanded that Lusha clarify the volume of Italian residents’ data it processes, its collection methods, and the sources of that data. The company must also explain its consent procedures for using personal information for commercial purposes.
• Broader Implications: The case highlights ongoing concerns about third-party data brokers and their role in digital marketing, particularly in how they handle and share personal data across borders.

Deep Dive

Italy’s Personal Data Protection Authority (Garante) has launched an investigation into Lusha Systems, a US-based company that’s no stranger to controversy in the world of online data. Known for selling “enriched” contact details, including email addresses and phone numbers, Lusha’s services are accessible to users in Italy, though it seems some of the data within its platform might not be as straightforward as one would hope.

Reports have surfaced from individuals who claim to have received unsolicited calls (often promotional or commercial) after their data, which may have originated from Lusha’s platform, was shared without their consent. These complaints have raised serious concerns over how Lusha collects and processes personal information, especially when it comes to individuals living in Italy.

The Garante has wasted no time in addressing these concerns, issuing a formal request for information from Lusha. The company now has 20 days to respond and provide detailed answers to a set of critical questions:

• How much data related to Italian residents does Lusha collect and process?
• Where is this data coming from? How is it collected, and who are the sources behind the platform’s database?
• Is Lusha using personal data from non-users of the platform, particularly regarding email addresses and phone numbers?
• Does the company obtain consent for using this data in the context of commercial communications or market research?
• How and why is this data shared with platform users, and is consent obtained for such sharing?

This investigation into Lusha’s data practices isn’t the first of its kind. The Italian authority has previously cracked down on real estate agencies that used similar third-party services, including phone number brokers, to promote their services without proper consent. These cases have revealed an ongoing tension between the convenience of data-sharing platforms and the privacy rights of individuals.

While the investigation is still in its early stages, its potential to shape the future of data collection and sharing in Italy, and across the European Union, cannot be overstated. For now, all eyes will be on Lusha as it works to clarify its practices and address the growing concerns of data privacy advocates. The outcome could set the stage for more rigorous scrutiny of companies operating in the data broker space, pushing for greater transparency and stronger safeguards to protect individuals’ personal information.

In the fast-paced world of data-driven marketing and business, companies like Lusha will have to adapt to the tightening grip of privacy regulations, and this case may just be the beginning of a larger conversation on the future of data ethics in the EU.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey.