The Italian Data Protection Authority (Garante per la protezione dei dati personali, GPDP) has condemned a car dealership for violating the personal data of its employees. The company used a facial recognition system to record their attendance and working hours. As the use of employees' biometric data for this purpose was not provided for by any law, it was de facto prohibited, the institution ruled.
In a decision handed down on 6 June, the GPDP condemned Cappello Giovanni & Figli (a small car sales and repair business operating in Sicily and employing 40 people) for using software and IT equipment that did not comply with the EU General Data Protection Regulation (GDPR) and Italian legislation. In particular, the company had adopted a facial recognition system (‘X-Face 380’) to allow access to the workplace, recording the entry and exit of each employee to establish their hours of...
Do you have information to share with us?
Article authors
Hélène Martinelli
Freelance