- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Selectra S.p.A. – €80,000 Fine (Italy, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Selectra S.p.A. was fined €80,000 for keeping a former employee's emails accessible for too long after their job ended. The Italian data protection authority found this excessive and noted that the company failed to inform users about how long their email data would be stored. This case highlights the importance of clear data retention policies.
What happened
Selectra S.p.A. was fined €80,000 for retaining a former employee's emails for three years after their employment ended.
Who was affected
The former employee whose emails were accessible after leaving the company was affected.
What the authority found
The authority ruled that Selectra S.p.A. did not provide sufficient information about data retention, violating GDPR requirements.
Why this matters
This ruling emphasizes the need for companies to have clear data retention policies and to inform users about how long their data will be kept. Businesses should review their practices to avoid similar fines.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 10 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has imposed a fine of EUR 80,000 on Selectra S.p.A.. A former employee had lodged a complaint with the DPA on the grounds that the controller was able to access their e-mail inbox even after the termination of the employment relationship. The DPA found that such a long retention period for e-mails (in some cases three years after the termination of the employment relationship) was excessive. The DPA also found that the controller had not provided the data subjects with sufficient information about the data processing (e.g. regarding the retention period for e-mail data).
Related Enforcement Actions (0)
No other enforcement actions found for Selectra S.p.A. in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
17 July 2024
Authority
Garante per la protezione dei dati personali
Fine Amount
€80,000
About this data
Cite as: Cookie Fines. Selectra S.p.A. - Italy (2024). Retrieved from cookiefines.eu
Last updated: