PrivacySignal
Enforcement

Italian SA fines a company for post-sick leave questionnaires

EDPB · · EU · Enforcement

Italy's data protection authority fined Magna PT S.p.A. and issued a definitive ban on data processing after the company used questionnaires to collect information from employees returning from sick leave. The regulator found violations covering lawfulness of processing, transparency obligations, and the handling of special category health data under the GDPR.

Why this matters: When you come back from sick leave, your employer does not get to run a questionnaire about it. Health information is some of the most sensitive data there is, and GDPR treats it that way for a reason. This case is a clean example of a company treating a legal compliance exercise as a data collection opportunity. The fine matters less than the processing ban, which means Magna PT cannot keep doing this at all. Any employer using return-to-work forms should look hard at what they are actually asking and whether they have any legal ground to ask it.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Enforcement
The Record · · International

Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings

Security changes include creating an incident response plan for vendor security failings, limiting how much data Labcorp shares with vendors and building an expansive risk management team charged with tracking vendors’ compliance with data security practices.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity

#enforcement#regulation#surveillance Read original →
Enforcement
L Law Commentary · · International

Tennessee Grandmother Jailed Nearly Six Months After AI Facial Recognition Match Sues Fargo for $10M

A Tennessee grandmother is suing the city of Fargo for $10 million after she was jailed for nearly six months following a facial recognition match generated by an AI system. The lawsuit centers on the accuracy and consequences of automated identification technology used in a criminal investigation.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · AI governance · Policy

#enforcement#surveillance#ai#privacy Read original →
Enforcement
The Guardian — Privacy · · International

TikTok drops appeal against £12.7m fine for not keeping under-13s off platform

TikTok has dropped its appeal against a £12.7 million fine issued by the UK's Information Commissioner's Office in 2023. The penalty was imposed after the ICO found TikTok failed to adequately verify users' ages or remove children under 13 from the platform.

Who should care: Lawyers · Privacy officers · Compliance

#enforcement Read original →
Enforcement
K KOAT · · International

Closing arguments delivered in New Mexico data privacy lawsuit against Facebook

Closing arguments have been delivered in a data privacy lawsuit filed by New Mexico against Facebook, bringing the case to its final stage before a verdict. The suit centers on how Facebook handled user data under New Mexico law.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
M Malwarebytes · · International

Google’s location data privacy failures draw a €403 million fine

Google has been fined €403 million over failures related to how it handled user location data privacy. The penalty reflects regulatory action against one of the world's largest data collectors for not meeting required privacy standards.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
Information Commissioner's Office · · UK

TikTok withdraws two appeals in children’s privacy action and accepts £12.7m fine

TikTok has dropped two appeals against the UK Information Commissioner's Office and agreed to pay a £12.7 million fine related to a children's privacy enforcement action. The company is no longer contesting the ICO's findings in those proceedings.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →