Italy

Comune di Coccaglio

6,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-02-12.

Rank · Sector

#120

of 213 in Employment

Rank · Italy

#346

of 543

Rank · All fines

#1,661

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-02-12
Controller / Processor: Comune di Coccaglio
Sector: Employment
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 6 (1) c), (2), (3) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 35 GDPR, Art. 88 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 6,000 on the Commune di Coccaglio. The controller uses video surveillance to protect its warehouse property. While the use of video surveillance for this purpose is lawful, the controller also used the footage in a disciplinary procedure against an employee, which exceeded the scope of the surveillance. The controller also failed to adequately inform its employees about data processing and perform a data protection impact assessment.

Open original source Links to the regulator's original publication or another source.