Unicredit S.p.A.
€70,000
Insufficient fulfilment of data subjects rights
決定日期
2022年6月16日
權限
Italian Data Protection Authority (Garante)
IT
部門
Employment
國家
IT
法律
GDPR狀態
FINAL說明
The Italian DPA has fined Unicredit S.p.A. EUR 70,000. An employee had filed a complaint with the DPA claiming that their right to access their personal data had not been sufficiently respected. The company required a specific form to be filled out in order to gain access to personal data. During its investigation, the DPA found that the requirement to fill out the form made it disproportionately difficult to exercise the right of access.
法律引文
Art. 12Art. 15
問題與違規
Insufficient fulfilment of data subjects rights