Italian DPA fines security firm €39,000 for employee data violations

What happened

The Italian Data Protection Authority (Garante) imposed a total administrative fine of EUR 39,000 on La Patria S.p.A. for failing to respond to employee access requests and for inadequate information about GPS‑derived geolocation data. The fine was split into EUR 22,000 for access‑right infringements and EUR 17,000 for information‑provision breaches.

Penalty

total administrative fine of EUR 39 000

Why it matters for trust and compliance

• Its status is in effect. It is in force now.
• The enforcement highlights the GDPR’s strict requirements for employee data access and transparent processing of location data.
• Takes effect August 6, 2026.
• Penalty: total administrative fine of EUR 39 000.
• It relates to GDPR. The regulations library explains what that law requires.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Confirm access, correction, deletion and opt-out requests are handled within the required time.