Burgo Group S.p.A
€20,000
Non-compliance with general data processing principles
Datum odločitve
23. november 2020
Organ
Italian Data Protection Authority (Garante)
IT
Sektor
Employment
Država
IT
Zakon
GDPRStatus
FINALOpis
The Italian DPA (Garante) imposed a fine of EUR 20,000 on the company for non-compliant practices. Thus, for example, the personnel director forwarded an e-mail conversation between the data subject and a work colleague containing personal data (information relating to physical and mental discomfort in the workplace) to four people in the company.
Pravne navedbe
Art. 5Art. 13
Vprašanja in kršitve
Non-compliance with general data processing principles