Details:

Summary The company had left the e-mail account of the data subject active even after the termination of his employment and had automatically forwarded incoming e-mails. The company did not provide sufficient information about this.
Link: link
Related articles:  Art. 5 (1) a), c), e) GDPR, Art. 13 GDPR, Art. 157 Codice della privacy
Type: Non-compliance with general data processing principles
Fine: EUR 20,000
Sector Employment

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law