Italian Data Protection Authority (Garante) · 28 May 2026
Liguria Health Protection Authority
Insufficient legal basis for data processing
Fine€6,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 28 May 2026
- Country
- Italy
- Sector
- Employment
- Regulator’s reference
- Not recorded
- Fino case number
- 2026/IT/074
What happened
The DPA fined a health agency €6,000 for unlawfully and continuously monitoring employees through a tracking system placed in its vehicles. The agency also unlawfully further processed this data for disciplinary proceedings against an employee.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 6Lawfulness of processingRead →
- Art. 25Data protection by design and by defaultRead →
- Art. 35Data protection impact assessmentRead →
- Art. 88Processing in the context of employmentRead →
- Accountability
- DPIA
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/IT/074.