Concentrix Cvg Italy s.r.l. – €20,000 Fine (Italy, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Concentrix Cvg Italy s.r.l. was fined for not properly protecting employees' health data. The company allowed workers to keep medication on their desks, which could reveal personal health information to others. This decision highlights the importance of safeguarding sensitive data in the workplace.
What happened
Concentrix Cvg Italy s.r.l. failed to adequately protect employees' health information by allowing visible medication on desks.
Who was affected
Employees whose health data could be indirectly accessed by coworkers due to the company's desk policy.
What the authority found
The Italian data protection authority ruled that Concentrix did not comply with data protection rules regarding the confidentiality of health data.
Why this matters
This case emphasizes that companies must ensure the confidentiality of sensitive information, especially in workplace settings. Businesses should review their policies to prevent unauthorized access to personal data.
GDPR Articles Cited
The union UILCOM Sardegna filed a complaint with the Italian DPA (garante) against the call center operator Concentrix Cvg Italy s.r.l. regarding an internal regulation of the controller. Under the terms of a 'clean desk policy,' the company had prohibited employees from keeping certain items, such as smartphones, on their desks, which was intended to ensure confidentiality in the processing of customers' personal data. Exceptions were made for medication, which the data subjects proved they needed to take during their shift. These had to be placed visibly on the desk, making it indirectly possible for other employees to obtain information on the health status of the data subjects. The controller had indeed informed the data subjects about the rules of procedure and obtained their consents. However, this did not contain any information on the processing of their health data.
Violations (1)
Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.
Art. 6(1) GDPR
Related Enforcement Actions (0)
No other enforcement actions found for Concentrix Cvg Italy s.r.l. in IT
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
26 November 2020
Authority
Garante per la protezione dei dati personali
Fine Amount
€20,000
Enforcement Tracker ID
ETid-503
About this data
Cite as: Cookie Fines. Concentrix Cvg Italy s.r.l. - Italy (2020). Retrieved from cookiefines.eu
Last updated: