Magna PT S.p.A.

€50,000

Insufficient legal basis for data processing

결정 날짜

2025년 7월 10일

권한

Italian Data Protection Authority (Garante)

IT

섹터

Employment

국가

IT

법률

GDPR

상태

FINAL

설명

The Italian DPA has imposed a fine on Magna PT S.p.A. Employees of the controllers were subjected to 'return to work interviews' after returning from an absence due to illness or hospitalisation. These interviews lacked a sufficient legal basis, particularly with regard to the processing of health data. Additionally, the controller failed to adequately inform the data subjects regarding the processing. Furthermore, the controller failed to minimise the amount of data processed and the retention period to only what was necessary.

법적 인용

Art. 5 (1)Art. 6Art. 9Art. 13Art. 88

문제 및 위반 사항

Insufficient legal basis for data processing

개인정보 보호 정책 시행에 대한 최신 정보

당사는 사용자의 개인정보를 존중합니다. 한 달에 한 번, 스팸 없이, 언제든지 구독을 취소할 수 있습니다.