# Comune di Curtarolo: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2025-10-23
- Original: https://www.enforcementtracker.com/ETid-2955
- Canonical: https://overview.legal/posts/49070
- Topics: Monitoring, IP Address, Controllers, Employees, Processing, Supervisory Authorities, Processing Agreement, Data Controller

## Summary

The Italian DPA has imposed a fine of EUR 15,000 on the Comune di Curtarolo. The controller used surveillance footage in disciplinary proceedings against an employee, and also ordered other employees to spy on the employee in question and take pictures and videos of them.

## Full text

The Italian DPA has imposed a fine of EUR 15,000 on the Comune di Curtarolo. The controller used surveillance footage in disciplinary proceedings against an employee, and also ordered other employees to spy on the employee in question and take pictures and videos of them.

GDPR Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1), c), e), (2), (3) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 35 GDPR, Art. 88 GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/49070 · 2026-08-22