# Unicredit S.p.A.: Insufficient fulfilment of data subjects rights

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2022-06-16
- Original: https://www.enforcementtracker.com/ETid-1369
- Canonical: https://overview.legal/posts/47484
- Topics: Right of Access, Right of Access Procedures, Personal Data, Data Subject Rights Exercise Modalities and Procedures, Inspection Access Rights and Cooperation Obligations, Employees, Supervisory Authorities, Processing Agreement, Law Enforcement

## Summary

The Italian DPA has fined Unicredit S.p.A. EUR 70,000. An employee had filed a complaint with the DPA claiming that their right to access their personal data had not been sufficiently respected. The company required a specific form to be filled out in order to gain access to personal data. During its investigation, the DPA found that the requirement to fill out the form made it disproportionately difficult to exercise the right of access.

## Full text

The Italian DPA has fined Unicredit S.p.A. EUR 70,000. An employee had filed a complaint with the DPA claiming that their right to access their personal data had not been sufficiently respected. The company required a specific form to be filled out in order to gain access to personal data. During its investigation, the DPA found that the requirement to fill out the form made it disproportionately difficult to exercise the right of access.

GDPR Articles: Art. 12 GDPR, Art. 15 GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/47484 · 2026-08-22