Italian DPA fines security company EUR 39 000 for violations concerning employees’ data
Italy's data protection authority fined security firm La Patria S.p.A. €39,000 following an employee complaint. The violations involved failures to provide transparent privacy information and blocking workers from accessing their own personal data.
Why this matters: Employees rarely think of themselves as data subjects, but their employers collect a lot about them. When a company fails to explain how that data is used, or blocks workers from seeing it, those workers cannot catch errors, spot misuse, or exercise any real control. This case is a reminder that GDPR rights apply inside the workplace too. A €39,000 fine is not catastrophic for a company, but the record matters. Workers deserve the same transparency any other data subject does.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.