Italian Data Protection Authority (Garante) · 10 February 2022
Costampress S.p.A.
Insufficient legal basis for data processing
Fine€10,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 10 February 2022
- Country
- Italy
- Sector
- Employment
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/IT/117
What happened
The Italian DPA issued a fine of €10,000 against a company for processing personal data contained in an former employee's computer without adopting internal regulations regarding the handling of employee's IT tools, in violation of Articles 5(1)(a), 12, and 13 GDPR.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a)Read →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Data principles
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/IT/117.