- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Encore Thermoengineering s.r.l. – €20,000 Fine (Italy, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Encore Thermoengineering s.r.l. was fined €20,000 for mishandling employee data. They obtained this data from a bankrupt company but stored it indefinitely and didn't respond properly to erasure requests. This case highlights the importance of data minimization and timely responses to data requests.
What happened
Encore Thermoengineering s.r.l. failed to comply with data minimization principles by storing employee data without a time limit and inadequately responding to erasure requests.
Who was affected
Former employees of a bankrupt company whose data was stored by Encore Thermoengineering s.r.l. without proper justification.
What the authority found
The Italian DPA ruled that Encore Thermoengineering s.r.l. violated GDPR principles by not minimizing data storage and not responding to erasure requests.
Why this matters
This ruling emphasizes the need for companies to limit data storage to what is necessary and to respond promptly to requests for data deletion. It serves as a reminder for businesses to review their data handling practices.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 13 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA imposed a fine of EUR 20,000 on Encore Thermoengineering s.r.l. The controller legally obtained employee data from another company that had gone bankrupt. The controller never hired those subjects. However, the controller failed to comply with the principle of data minimization by storing the data without a time limit, and failed to adequately respond to a request for erasure by the data subjects.
Related Enforcement Actions (0)
No other enforcement actions found for Encore Thermoengineering s.r.l. in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
13 March 2025
Authority
Garante per la protezione dei dati personali
Fine Amount
€20,000
About this data
Cite as: Cookie Fines. Encore Thermoengineering s.r.l. - Italy (2025). Retrieved from cookiefines.eu
Last updated: