Italian Data Protection Authority (Garante) · 18 June 2026
Cosmint S.p.A.
Non-compliance with general data processing principles
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 18 June 2026
- Country
- Italy
- Sector
- Employment
- Regulator’s reference
- Not recorded
- Fino case number
- 2026/IT/086
What happened
The Italian DPA has imposed a fine of EUR 6,600 on Cosmint S.p.A. The data subject was a former employee of the controller through a temporary employment agency. The agency informed them about the termination of their employment with the controller. One month after the termination the data subject made arrangements to empty their locker but found that someone had already opened it and thrown away its contents. Because the locker contained items that could identify the data subject the controller processed personal data by filming the opening and emptying of the locker. However the controller did not inform the data subject about this processing.
Summary from the CMS Enforcement Tracker, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data principles
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/IT/086.