# The Italian SA imposed a 40 000 EUR fine on a company for violating the confidentiality of a employee's email account after the end of his employment

- Type: News
- Source: European Data Protection Board
- Date: 2026-06-04
- Original: https://www.edpb.europa.eu/news/the-italian-sa-imposed-a-40-000-eur-fine-on-a-company-for-violating-the-confidentiality-of-a_en
- Canonical: https://overview.legal/posts/53060
- Topics: Personal Data, Right of Access Procedures, Right of Access, Supervisory Authorities, Information Provision Modalities and Communication Methods, Processing, Supervision, Transparency, DSA Enforcement Authority Powers and Procedures

## Summary

Background informationDate of final decision: 18 December 2025National caseController: LTL S.p.A.Legal Reference(s): Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right to access by the data subject)Decision: Administrative fine, Compliance order, Erasure order or Add here your free text for the decisionKey words: Administrative fine, Principles rel

## Full text

Background informationDate of final decision: 18 December 2025National caseController: LTL S.p.A.Legal Reference(s): Article 5 (Principles relating to processing of personal data), Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 15 (Right to access by the data subject)Decision: Administrative fine, Compliance order, Erasure order or Add here your free text for the decisionKey words: Administrative fine, Principles relating to processing of personal data, Transparency,Right of access, Employment, Data subject rightsSummary of the DecisionOrigin of the case In a complaint submitted to the Italian Supervisory Authority (SA), an individual complained that, after receiving a disciplinary letter followed by dismissal, the company had denied him access to his company' email account, which remained active. Exercising his rights, the data subject asked the company to disable the email account, forward any messages re

## Cited law provisions (3)

### GDPR — gdpr-art-5-en

Principles relating to processing of personal data

### GDPR — gdpr-art-12-en

Transparent information, communication and modalities for the exercise of the rights of the data subject

### GDPR — gdpr-art-15-en

Right of access by the data subject

---
Generated by overview.legal · https://overview.legal/posts/53060 · 2026-08-22