Health Protection Agency of the Metropolitan City of Milan, Workplace Prevention and Safety Service, Milan North: Insufficient legal basis for data processing

€7,000 fine - Italian Data Protection Authority (Garante)

€7,000 Fine

Health Protection Agency of the Metropolitan City of Milan, Workplace Prevention and Safety Service, Milan North

ITALY

Insufficient legal basis for data processing

May 21, 2025 Source

Content

The Italian DPA has imposed a fine of EUR 7,000 on Health Protection Agency of the Metropolitan City of Milan, Workplace Prevention and Safety Service, Milan North. The controller forwarded health data of a data subject to their employer without a sufficient legal basis.

GDPR Articles: Art. 5 (1) c), f) GDPR, Art. 9 GDPR
Industry: Public Sector and Education