Italy

Cosmint S.p.A.

6,600 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-06-18.

Rank · Sector

#114

of 216 in Employment

Rank · Italy

#360

of 604

Rank · All fines

#1,659

of 3,170

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-06-18
Controller / Processor: Cosmint S.p.A.
Sector: Employment
Quoted Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) b), c), (2) GDPR, Art. 13 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has imposed a fine of EUR 6,600 on Cosmint S.p.A. The data subject was a former employee of the controller through a temporary employment agency. The agency informed them about the termination of their employment with the controller. One month after the termination the data subject made arrangements to empty their locker but found that someone had already opened it and thrown away its contents. Because the locker contained items that could identify the data subject the controller processed personal data by filming the opening and emptying of the locker. However the controller did not inform the data subject about this processing.

Open original source Links to the regulator's original publication or another source.