Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Comune di Vicchio: Insufficient legal basis for data processing

€8,000 Fine
Comune di Vicchio
ITALY
Art. 5 GDPR Art. 6 GDPR Art. 9 GDPR
Special Categories of Data Biometric Data Types of Special Categories of Personal Data Biometric Data Employees Personal Data IP Address Processing
Dec 15, 2022 Source

How it connects

Related across sources

News De Autoriteit Persoonsgegevens publiceert een rapport over de risicoanalyse van de AVG (Algemene Verordening Gegevensbescherming). AEPD Guidance Guidelines 04/2022 on the calculation of administrative fines under the GDPR EDPB Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement EDPB News ICO Publishes Draft Employee Monitoring Guidance for Consultation Hunton Andrews Kurth News De ICO publiceert een conceptrichtlijn over het monitoren van werknemers ter beoordeling. Hunton Andrews Kurth News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet

Full text

The Italian DPA (Garante) imposed a fine of EUR 8,000 on Comune di Vicchio. The municipality processed biometric data of employees for the purpose of registering their attendance. Garante found that such processing was not proportionate and therefore constituted an unjustified infringement of the rights of the data subjects. Subsequently, Garante determined that the processing of biometric data had taken place without a legal basis.

Industry: Employment

Original document at the source www.garanteprivacy.it

Similar Content