Italian DPA fines security company EUR 39 000 for violations concerning employees' data

Summary: Background informationDate of final decision: 6 August 2026National caseController: La Patria S.p.A.Legal Reference(s): Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject), Article 13 (Information to be provided where personal data are collected from the data subject) and Article 15 …

Why it matters: This matters if it changes how teams think about model governance, safety work, monitoring, or regulatory exposure around deployed AI systems.

What to watch: Watch for follow-on technical guidance, deployment constraints, evaluation details, or signs that the announcement changes actual production practice rather than just policy language.

Source: EDPB News