Italy

Unicredit S.p.A.

70,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2022-06-16.

Rank · Sector

#30

of 213 in Employment

Rank · Italy

#99

of 543

Rank · All fines

#577

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2022-06-16
Controller / Processor: Unicredit S.p.A.
Sector: Employment
Quoted Articles: Art. 12 GDPR, Art. 15 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Italian DPA has fined Unicredit S.p.A. EUR 70,000. An employee had filed a complaint with the DPA claiming that their right to access their personal data had not been sufficiently respected. The company required a specific form to be filled out in order to gain access to personal data. During its investigation, the DPA found that the requirement to fill out the form made it disproportionately difficult to exercise the right of access.

Open original source Links to the regulator's original publication or another source.