Italy

Comune di Curtarolo

15,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-10-23.

Rank · Sector

#78

of 213 in Employment

Rank · Italy

#233

of 543

Rank · All fines

#1,209

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-10-23
Controller / Processor: Comune di Curtarolo
Sector: Employment
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1), c), e), (2), (3) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 35 GDPR, Art. 88 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 15,000 on the Comune di Curtarolo. The controller used surveillance footage in disciplinary proceedings against an employee, and also ordered other employees to spy on the employee in question and take pictures and videos of them.

Open original source Links to the regulator's original publication or another source.