- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Sportitalia – €20,000 Fine (Italy, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Sportitalia was fined EUR 20,000 for improperly processing employees' biometric data for attendance tracking. This is significant because it shows that companies must be careful when handling sensitive personal data like fingerprints. Organizations need to ensure they inform employees about such data processing.
What happened
Sportitalia processed employees' fingerprints for attendance without proper justification and information.
Who was affected
Employees whose biometric data was collected for attendance tracking were affected.
What the authority found
The DPA found that the processing of biometric data was unjustified and lacked sufficient information for the employees.
Why this matters
This ruling highlights the importance of transparency and justification in processing sensitive data. Companies must be clear with employees about how their data is used.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA (Garante) imposed a fine of EUR 20,000 on Sportitalia. The controller processed biometric data (fingerprints) of employees for the purpose of registering their attendance. Garante found that such extensive processing was not proportionate and therefore constituted an unjustified infringement of the rights of the data subjects. Furthermore, Garante determined that the processing of biometric data had taken place without sufficiently informing the data subjects about the processing.
Related Enforcement Actions (0)
No other enforcement actions found for Sportitalia in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
10 November 2022
Authority
Garante per la protezione dei dati personali
Fine Amount
€20,000
About this data
Cite as: Cookie Fines. Sportitalia - Italy (2022). Retrieved from cookiefines.eu
Last updated: