- Date
- 14 September 2023
- Country
-
Italy
-
Geographical scope
- National
- Type
-
Description
On 14 September 2023, the Italian Data Protection Authority (DPA) decided that employers are obliged to provide a full response to employees' requests to exercise the right to data access. This especially goes for the employees right to the communication and disclosure of geolocation data.
Three employees brought the case to the DPA, complaining that their employer had not provided a proper response to their request to access GPS data collected about themselves on the company's smartphone. They had requested the data to be able to, for instance, verify the accuracy of their earnings.
The DPA found that the company's failure to adequately respond to the employees request and the company's processing of the data were in breach of Article 15 of the GDPR. The employer should have provided the requested data to its employees.
The company was fined 20,000 Euro by the Italian DPA as a result.
- Keywords
-
privacy and data protection,
income,
information asymmetry
- Actors
-
Individual worker,
Government
Sources