Italy: Data Protection Authority investigation into Cappello Giovanni and Figli's use of facial recognition systems to control attendance in the workplace
Progress
Current status
under investigation
06 Jun 2024 under investigation
Scope
Implementers
Italy
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
other service provider
software provider: other software
Government Branch
executive
Government Body
data protection authority
Implementation Level
national
Timeline of events
Issued Data Protection Authority ruling specifying that biometric data use for attendance tracking lacks legal basis
On 6 June 2024, the Italian Data Protection Authority (DPA) fined Cappello Giovanni and Figli EUR 120’000 for violations of employee privacy rights at their dealership. The action followed a complaint about unauthorised facial recognition usage to …
SourceEvent type
investigation
Action type
interim ruling
Government branch
executive
Government body
data protection authority