Skip to content
Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Costampress S.p.A.: Insufficient legal basis for data processing

The company had left the e-mail account of the data subject active even after the termination of his employment and did not provide sufficient information about this.

€10,000 Fine
Costampress S.p.A.
ITALY
Art. 5 GDPR Art. 12 GDPR Art. 13 GDPR

Full text

The company had left the e-mail account of the data subject active even after the termination of his employment and did not provide sufficient information about this.

Industry: Employment

How it connects

Opinion 01/2019 draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR) Adopted 1 EDPB Plenary Meeting, 22 - 23 January 2019 Opinion 01 /201 9 on the draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the… Opinion ·EDPB Jan 23, 2019 DPIA Supervision Supervisory Authorities