Date
14 September 2023

Tag

Active

Country
Italy Italy
Geographical scope
National
Type
  • Type

    Legislation

    Legal

Description

On 14 September 2023, the Italian Data Protection Authority (DPA) decided that employers are obliged to provide a full response to employees' requests to exercise the right to data access. This especially goes for the employees right to the communication and disclosure of geolocation data.

Three employees brought the case to the DPA, complaining that their employer had not provided a proper response to their request to access GPS data collected about themselves on the company's smartphone. They had requested the data to be able to, for instance, verify the accuracy of their earnings.

The DPA found that the company's failure to adequately respond to the employees request and the company's processing of the data were in breach of Article 15 of the GDPR. The employer should have provided the requested data to its employees.

The company was fined 20,000 Euro by the Italian DPA as a result.


Additional metadata

Keywords
privacy and data protection, income, information asymmetry
Actors
Individual worker, Government

Sources

Citation

Eurofound (2023), Italian Data Protection Authority: employee has right to access data gathered by employer-installed GPS system (Initiative), Record number 4406, Platform Economy Database, Dublin, https://apps.eurofound.europa.eu/platformeconomydb/italian-data-protection-authority-employee-has-right-to-access-data-gathered-by-employerinstalled-gps-system-110155.