Skip to content
Enforcement · Garante EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Garante · 619/2026

The controller explained that it had installed the cameras to record the lockers where personal items are stored.

Italy

How it connects

2016 IEHC 323 High Court examines DPA inquiry into Meta's refusal of raw data access and portability On 25 May 2018, Michael Veale, the data subject, submitted an access and data portability request to Meta Platforms Ireland Limited (MPIL) (then Facebook Ireland Limited), the… Aug 21, 2026 Data Portability Supervisory Authorities Right of Access Procedures
C-231/22 État belge v Autorité de protection des données In Case C-231/22, the Court of Justice of the European Union interpreted Article 4(7) and Article 5(2) of the GDPR in response to a preliminary reference from the Brussels Court… CJEU ·Third Chamber Jan 11, 2024 Controllers Personal Data Processing
C-645/19 Facebook Ireland Ltd and Others v Gegevensbeschermingsautoriteit In Case C-645/19, the Court of Justice of the European Union (Grand Chamber) addressed a preliminary ruling from the Brussels Court of Appeal concerning Facebook Ireland Ltd and… CJEU ·Grand Chamber Jun 15, 2021 Supervision Supervisory Authorities Controllers
C-604/22 IAB Europe v Gegevensbeschermingsautoriteit In Case C-604/22, the Court of Justice of the European Union ruled on a preliminary reference from the Brussels Court of Appeal in proceedings between IAB Europe and the Belgian… CJEU ·Fourth Chamber Mar 7, 2024 Controllers Personal Data Data Controller
C-169/23 Nemzeti Adatvédelmi és Információszabadság Hatóság v UC In Case C-169/23, the Court of Justice of the European Union (Third Chamber) ruled on a preliminary reference from the Kúria (Hungary) concerning whether the Budapest Metropolitan… CJEU ·Third Chamber Nov 28, 2024 Personal Data Supervision Right of Access

Full text

The controller explained that it had installed the cameras to record the lockers where personal items are stored. No recording of the changing rooms, showers or toilets was undertaken, and footage was stored for 72 hours. Also, only two individuals would access the footage at the request of judicial or public security authorities.The controller explained that it had installed the cameras to record the lockers where personal items are stored. No recording of the changing rooms, showers or toilets was undertaken, and footage was stored for 72 hours. Also, only two individuals would access the footage at the request of judicial or public security authorities. The DPA contacted the controller about the possible violation of the GDPR. Subsequently, the controller deactivated the cameras and the subsequent processing operations, revised the retention periods of the footage from 72 hours to 12/24 hours and updated the signage.The DPA contacted the controller about the possible violation of th