Italy: Data Protection Authority imposed a permanent restriction on Amazon’s processing of personal data following allegations of unlawful handling of workers’ information

On 24 February 2026, the Italian Data Protection Authority (GPDP) issued provision no. 107 against Amazon after a joint investigation with the National Labour Inspectorate and the Financial Guard’s Special Privacy and Technological Fraud Unit. The investigation focused on Amazon’s logistics hubs in Passo Corese and Castel San Giovanni, following inspections in February 2026. The GPDP found that managers had recorded sensitive information about employees in a free-text field of the XX platform, including health conditions, strike participation, trade union activities, and personal or family circumstances. This affected around 1’822 employees since January 2022 and violated Italian and EU data protection rules. The GPDP also found four cameras that could identify workers entering restricted areas. As a result, the GPDP ordered immediate restrictions on both the XX platform annotations and the four cameras, requiring the company to verify the lawfulness of the platform data within seven days.