Italy: Data Protection Authority investigation into Cappello Giovanni and Figli's use of facial recognition systems to control attendance in the workplace

Progress

Current status
under investigation
06 Jun 2024 under investigation

Scope

Implementers
Italy
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
other service provider
software provider: other software
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

06 Jun 2024
under investigation

Issued Data Protection Authority ruling specifying that biometric data use for attendance tracking lacks legal basis

On 6 June 2024, the Italian Data Protection Authority (DPA) fined Cappello Giovanni and Figli EUR 120’000 for violations of employee privacy rights at their dealership. The action followed a complaint about unauthorised facial recognition usage to …

Source
Event type investigation
Action type interim ruling
Government branch executive
Government body data protection authority