Italy

Comune di Curtarolo

15,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-10-23.

Rank · Sector

#81

of 224 in Employment

Rank · Italy

#260

of 625

Rank · All fines

#1,299

of 3,275

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-10-23
Controller / Processor: Comune di Curtarolo
Sector: Employment
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1), c), e), (2), (3) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 35 GDPR, Art. 88 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 15,000 on the Comune di Curtarolo. The controller used surveillance footage in disciplinary proceedings against an employee, and also ordered other employees to spy on the employee in question and take pictures and videos of them.

Open original source Links to the regulator's original publication or another source.