Techpartner s.r.l.
GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-10-20.
Case details
- Authority
- Italian Data Protection Authority (Garante)
- Date
- 2026-10-20
- Controller / Processor
- Techpartner s.r.l.
- Sector
- Employment
- Quoted Articles
- Art. 5 (1) a), c), e) GDPR, Art. 12 (3) GDPR, Art. 15 GDPR
- Type of violation
- Non-compliance with general data processing principles
Summary
The Italian DPA has imposed a fine of EUR 25,500 on Techpartner s.r.l. The data subject is an employee of the controller. In October 2023, they complained that Techpartner had not adequately responded to an access request made by their lawyer in July 2023. The request related to all the data subject's personal data since 2013 and was made in relation to an employment dispute. The controller responded by stating that the data subject should inspect the personal data on site. After the Garante's investigation had begun, the controller sent the relevant documents on 17 April 2024. The controller stated that the data had been transferred between different companies due to a merger. The authority found that the controller's internal policy also allowed access to employees' email accounts when they were absent, and deemed this practice to be unlawful.