Regulatory Watch  /  Italy  /  Fine
Moderate impactFineIn effect

Italian DPA fines security firm €39,000 for employee data violations

The Italian Data Protection Authority (Garante) imposed a total administrative fine of EUR 39,000 on La Patria S.p.A. for failing to respond to employee access requests and for inadequate information about GPS‑derived geolocation data. The fine was split into EUR 22,000 for access‑right infringements and EUR 17,000 for information‑provision breaches.

Why it matters: The enforcement highlights the GDPR’s strict requirements for employee data access and transparent processing of location data.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
Italian DPA fines security company EUR 39 000 for violations concerning employees’ data
European Data Protection Board news · primary source · Oct 9, 2026
Details
JurisdictionItaly
RegulatorGarante – Italian Data Protection Authority
LawGeneral Data Protection Regulation
StatusIn effect
PublishedOctober 9, 2026
EffectiveAugust 6, 2026
DecisionAugust 6, 2026
Penaltytotal administrative fine of EUR 39 000
OrganisationsLa Patria S.p.A.
Topicsaccess, transparency, employee privacy
Datapersonal, location, precise geolocation