Italian DPA Orders Amazon Unit to Halt Employee Data Processing
- Author: Arno Schlösser, DP-Dock GmbH
- Last updated: March 2026
- Category: Data Security
The Italian Supervisory Authority (Garante) has ordered Amazon Italia Logistica S.r.l. to immediately cease certain employee data processing activities affecting more than 1,800 workers, citing serious violations of the General Data Protection Regulation (GDPR).
The investigation focused on an internal platform used by managers to record notes following employee absences. According to the authority, the system enabled the systematic collection of extensive and sensitive personal data, including health conditions, trade union involvement, and private family matters.
The findings highlight clear breaches of core GDPR principles, notably data minimization and purpose limitation, as well as excessive retention and insufficient safeguards for integrity and confidentiality. Personal data was retained for prolonged periods and made accessible to a wide range of managerial staff, increasing the risk of misuse.
Beyond the specific infringements, the decision underscores a broader and critical point: employee data protection is not a secondary compliance issue, but a fundamental obligation. The processing of sensitive information in the workplace carries heightened risks, which require appropriate technical and organizational measures.
By ordering the immediate suspension of the unlawful processing, the authority reinforces the principle that workplace practices must strictly respect data protection rules in both design and execution.
Even routine tools like attendance systems can lead to unlawful data processing without clear rules on how employee data is collected, accessed, and stored.
Organizations should regularly review HR and management systems with their DPO or privacy counsel to ensure compliance with data protection laws.
Organizations must treat employee data with the highest level of care to ensure GDPR compliance and safeguard fundamental rights of the workers. We, as DP Dock, are more than happy to assist in any issue your company might face. Please feel free to reach out at any point.
For more information, click here.
