Autostrade per l’Italia S.p.A.
€420,000
Insufficient legal basis for data processing
Data della decisione
21 maggio 2025
Autorità
Italian Data Protection Authority (Garante)
IT
Settore
Transportation and Energy
Paese
IT
Legge
GDPRStato
FINALDescrizione
The Italian DPA has imposed a fine of EUR 420,000 on Autostrade per l’Italia S.p.A. The controller used data from a worker's social media profiles obtained by other workers and a third party in a disciplinary proceeding. The controller did not have a legal basis to use this data.
Citazioni legali
Art. 5 (1)Art. 6Art. 88
Problemi e violazioni
Insufficient legal basis for data processing