# Processing in the context of employment — GDPR — context bundle

> Focused context for a single provision, curated from overview.legal on 2026-08-22. Canonical page: https://overview.legal/laws/gdpr/art-88
> Every item cites its source. Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

## Provision

### Processing in the context of employment — Processing in the context of employment

*GDPR, gdpr-art-88-en — https://overview.legal/laws/gdpr/art-88*

1. Member States may, by law or by collective agreements, provide for more specific rules to ensure the protection of the rights and freedoms in respect of the processing of employees' personal data in the employment context, in particular for the purposes of the recruitment, the performance of the contract of employment, including discharge of obligations laid down by law or by collective agreements, management, planning and organisation of work, equality and diversity in the workplace, health and safety at work, protection of employer's or customer's property and for the purposes of the exercise and enjoyment, on an individual or collective basis, of rights and benefits related to employment, and for the purpose of the termination of the employment relationship.

2. Those rules shall include suitable and specific measures to safeguard the data subject's human dignity, legitimate interests and fundamental rights, with particular regard to the transparency of processing, the transfer of personal data within a group of undertakings, or a group of enterprises engaged in a joint economic activity and monitoring systems at the work place.

3. Each Member State shall notify to the Commission those provisions of its law which it adopts pursuant to paragraph 1, by 25 May 2018 and, without delay, any subsequent amendment affecting them.

## Enforcement

32 decision(s) on record cite Article 88, totalling approximately €6,881,000 in fines (median €13,500).

Top fines:
- **Foodinho Srl: Non-compliance with general data processing principles** (ITALY, €5,000,000) — https://overview.legal/posts/48646
- **Garante: Piaggio violated GDPR by accessing former employees' emails in disciplinary probe** (Italy, €460,000) — https://overview.legal/posts/187480
- **Autostrade per l’Italia S.p.A.: Insufficient legal basis for data processing** (ITALY, €420,000) — https://overview.legal/posts/48797
- **Autostrade per l'Italia S.p.A.: Onvoldoende juridische basis voor de verwerking van gegevens.** (ITALY, €420,000) — https://overview.legal/posts/52270
- **Selectra S.p.A.: Non-compliance with general data processing principles** (ITALY, €80,000) — https://overview.legal/posts/48598

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-88 · 2026-08-22