Sirio S.p.A.
€1,000
Insufficient legal basis for data processing
Decision Date
7 de dezembro de 2023
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Employment
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 1,000 on Sirio S.p.A.. An employee filed a complaint with the DPA because the controller had passed on their personal data to a bank without their consent and without informing them.
Legal Citations
Art. 5 (1)Art. 6Art. 13
Issues & Violations
Insufficient legal basis for data processing