Burgo Group S.p.A
€20,000
Non-compliance with general data processing principles
決定日期
2020年11月23日
權限
Italian Data Protection Authority (Garante)
IT
部門
Employment
國家
IT
法律
GDPR狀態
FINAL說明
The Italian DPA (Garante) imposed a fine of EUR 20,000 on the company for non-compliant practices. Thus, for example, the personnel director forwarded an e-mail conversation between the data subject and a work colleague containing personal data (information relating to physical and mental discomfort in the workplace) to four people in the company.
法律引文
Art. 5Art. 13
問題與違規
Non-compliance with general data processing principles