Burgo Group S.p.A: Non-compliance with general data processing principles

€20,000 fine - Italian Data Protection Authority (Garante)

€20,000 Fine

Burgo Group S.p.A

ITALY

Non-compliance with general data processing principles

Nov 23, 2020 Source

Content

The Italian DPA (Garante) imposed a fine of EUR 20,000 on the company for non-compliant practices. Thus, for example, the personnel director forwarded an e-mail conversation between the data subject and a work colleague containing personal data (information relating to physical and mental discomfort in the workplace) to four people in the company.

GDPR Articles: Art. 5 GDPR, Art. 13 GDPR
Industry: Employment