Italian DPA fines security firm €39,000 for employee data violations
The enforcement highlights the GDPR’s strict requirements for employee data access and transparent processing of location data.
ADTP Regulatory Watch· October 9, 2026· Garante – Italian Data Protection Authority
ImpactModerate 59
Type💰 Fine
Statusin effectin force
JurisdictionEU-IT
Effective6 August 2026
What happened
The Italian Data Protection Authority (Garante) imposed a total administrative fine of EUR 39,000 on La Patria S.p.A. for failing to respond to employee access requests and for inadequate information about GPS‑derived geolocation data. The fine was split into EUR 22,000 for access‑right infringements and EUR 17,000 for information‑provision breaches.
Penalty
total administrative fine of EUR 39 000
Why it matters for trust and compliance
Its status is in effect. It is in force now.
The enforcement highlights the GDPR’s strict requirements for employee data access and transparent processing of location data.
Takes effect August 6, 2026.
Penalty: total administrative fine of EUR 39 000.
It relates to GDPR. The regulations library explains what that law requires.
Who is affected
technologycontrolleremployerLa Patria S.p.A.
Recommended actions
Check that privacy notices describe the practices this addresses.
Confirm access, correction, deletion and opt-out requests are handled within the required time.