# Burgo Group S.p.A: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2020-11-23
- Original: https://www.enforcementtracker.com/ETid-459
- Canonical: https://overview.legal/posts/46574
- Topics: Personal Data, Employees, IP Address, Processing Agreement, Human Resources, Processing, Supervisory Authorities

## Summary

The Italian DPA (Garante) imposed a fine of EUR 20,000 on the company for non-compliant practices. Thus, for example, the personnel director forwarded an e-mail conversation between the data subject and a work colleague containing personal data (information relating to physical and mental discomfort in the workplace) to four people in the company.

## Full text

The Italian DPA (Garante) imposed a fine of EUR 20,000 on the company for non-compliant practices. Thus, for example, the personnel director forwarded an e-mail conversation between the data subject and a work colleague containing personal data (information relating to physical and mental discomfort in the workplace) to four people in the company.

GDPR Articles: Art. 5 GDPR, Art. 13 GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/46574 · 2026-08-22