Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Unicredit S.p.A.: Insufficient fulfilment of data subjects rights

€70,000 Fine
Unicredit S.p.A.
ITALY
Art. 12 GDPR Art. 15 GDPR
Right of Access Right of Access Procedures Personal Data Data Subject Rights Exercise Modalities and Procedures Inspection Access Rights and Cooperation Obligations Employees Supervisory Authorities Processing Agreement
Jun 16, 2022 Source

How it connects

Related across sources

Guidance Guidelines 01/2022 on data subject rights - Right of access EDPB News Greek SA fines Clearview AI for EUR 20M IAPP Case Law Google LLC v CNIL CJEU Case Law GC and Others v CNIL CJEU Case Law Peter Nowak v Data Protection Commissioner CJEU Case Law CJEU Bavarian Lager: Disclosing personal data in access-to-documents requests is CJEU

Full text

The Italian DPA has fined Unicredit S.p.A. EUR 70,000. An employee had filed a complaint with the DPA claiming that their right to access their personal data had not been sufficiently respected. The company required a specific form to be filled out in order to gain access to personal data. During its investigation, the DPA found that the requirement to fill out the form made it disproportionately difficult to exercise the right of access.

Industry: Employment

Original document at the source www.gpdp.it

Similar Content