Garante per la protezione dei dati personali (Italy) - 342/2026
Italy's DPA warns AI emotion-inference system used for workplace stress monitoring risks GDPR violations.
Italy's data protection authority (Garante) issued a warning in case 342/2026 regarding an AI system that infers employee stress levels in the workplace. While the DPA found no current GDPR violation because data was not transferred to employers and subjects could not be identified from reports, it ordered the controller to implement safeguards against future disclosure of personal data. The decision emphasizes that AI systems inferring emotions in the workplace violate the EU AI Act Article 5(1)(f) and require compliance with GDPR design principles and transparency requirements.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Garante per la protezione dei dati personali (Italy)?
Get an email when a new story names Garante per la protezione dei dati personali (Italy), usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAn AI system designed to infer employee stress levels in the workplace was found to violate the EU AI Act's prohibition on emotion recognition systems, despite currently complying with GDPR due to anonymized reporting. The Italian data protection authority emphasized that such systems must implement robust safeguards to prevent future disclosure of personal data and comply with GDPR's privacy-by-design principles. This case highlights the evolving regulatory landscape where AI systems face dual compliance requirements under both data protection and AI-specific legislation. Organizations deploying workplace AI must ensure transparency, implement technical safeguards, and continuously assess compliance with multiple regulatory frameworks.
What helps against this
How we list vendors- AI application security
Prompt injection, data leaks through AI tools and unapproved AI use get caught.