Privacy Fine to Lombardy Region, for Illicit Control of Email and Internet

The Lombardy region was fined €50,000 for illegally processing employee email metadata, web logs and technical support system data. The violations included failing to obtain union consent to store metadata for 90 days and excessive collection of employee privacy information. The authorities required remedial measures such as anonymization and shortening the retention period, and emphasized the need to comply with privacy design principles and cl…