Burgo Group S.p.A
€20,000
Non-compliance with general data processing principles
결정 날짜
2020년 11월 23일
권한
Italian Data Protection Authority (Garante)
IT
섹터
Employment
국가
IT
법률
GDPR상태
FINAL설명
The Italian DPA (Garante) imposed a fine of EUR 20,000 on the company for non-compliant practices. Thus, for example, the personnel director forwarded an e-mail conversation between the data subject and a work colleague containing personal data (information relating to physical and mental discomfort in the workplace) to four people in the company.
법적 인용
Art. 5Art. 13
문제 및 위반 사항
Non-compliance with general data processing principles