Italy

Based s.r.l.

12,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-02-12.

Rank · Sector

#83

of 213 in Employment

Rank · Italy

#253

of 543

Rank · All fines

#1,294

of 3,050

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-02-12
Controller / Processor: Based s.r.l.
Sector: Employment
Quoted Articles: Art. 5 (1) a) GDPR, Art. 12 GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Italian DPA has imposed a fine of EUR 12,000 on Based s.r.l. A former employee requested access to his personal data relating to his email account, as well as the deletion of this data. The controller failed to respond adequately to the request and also failed to provide the data subject with its privacy policy.

Open original source Links to the regulator's original publication or another source.