Italian Data Protection Authority (Garante) · 2 July 2020
Mapei S.p.A.
Insufficient fulfilment of data subjects rights
Fine€15,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 2 July 2020
- Country
- Italy
- Sector
- Industry and Commerce
- Regulator’s reference
- Not recorded
- Fino case number
- 2020/IT/021
What happened
The Italian DPA found that access of the employer to the email account of the former employee must protect the privacy of the latter and not infringe the data minimization and fairness principles. Also, the privacy rights of the data subject (e.g. right to access and right to erasure) must be granted in due time.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal dataRead →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 15Right of access by the data subjectRead →
- Data principles
- Data subject rights
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/IT/021.