Italy

Istituto Nazionale di Ricerca Metrologica

10,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-09-03.

Rank · Sector

#197

of 385 in Public Sector and Education

Rank · Italy

#337

of 604

Rank · All fines

#1,514

of 3,170

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-09-03
Controller / Processor: Istituto Nazionale di Ricerca Metrologica
Sector: Public Sector and Education
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) c), (2), (3) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR, Art. 35 GDPR, Art. 88 (1) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA has imposed a fine of EUR 10,000 on Istituto Nazionale di Ricerca Metrologica. The controller had reached an agreement with the trade union regarding the installation of ten surveillance cameras at its Turin site. The cameras were intended to film the walls and fences. However, after subsequent testing, the controller installed eight more cameras and changed the installation. During the testing period, the cameras displayed live images but did not record any footage. Employees were not informed about the testing of the cameras. The controller stated that they had planned to inform the union and its employees about the recordings after the testing period and before they started recording.

Open original source Links to the regulator's original publication or another source.