Top Secrert Investigazioni e sicurezza s.r.l.
GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-07-23.
Case details
- Authority
- Italian Data Protection Authority (Garante)
- Date
- 2026-07-23
- Controller / Processor
- Top Secrert Investigazioni e sicurezza s.r.l.
- Sector
- Not assigned
- Quoted Articles
- Art. 5 (1) a), c), e) GDPR, Art. 13 GDPR
- Type of violation
- Non-compliance with general data processing principles
Summary
The Italian DPA has imposed a fine of EUR 6,500 on Top Secret Investigazioni e sicurezza s.r.l. The data subjects, who are former employees of the controller, stated in a complaint that the controller had failed to deactivate personalised company email accounts. Emails sent to the aforementioned accounts were redirected to another of the controller's accounts. The controller also failed to adequately inform and document its data processing activities. Although the controller had provided the data subjects with a data processing policy before the implementation of the GDPR it had not updated the policy to meet the required standard of information.