Italy’s Data Protection Authority orders Amazon to stop record-keeping of workers’ personal data

04 March 2026

The Italian Data Protection Authority (Garante per la protezione dei dati personali) has ordered Amazon Italia Logistica to immediately stop processing the personal data of more than 1,800 employees at its Passo Corese (RI) site.

The ban concerns workers’ sensitive information which Amazon systematically collected and stored throughout their employment and retained for up to ten years after they left the company, using an internal platform linked to the attendance tracking system and accessible to numerous managers.

The information was recorded on the platform following interviews conducted when employees returned from periods of absence. It included details about medical conditions — such as Crohn’s disease, herniated discs, and pacemaker implants — as well as participation in strikes and trade union activities. In some cases, notes referred to alleged misuse of leave. Personal and family matters were also documented, including references to a terminally ill parent, a sibling with brain cancer and marital separations. Such practices are in breach of legislation prohibiting employers from processing data which are not relevant for assessing an employee’s professional aptitude.

Amazon Italia Logistica was also ordered to stop processing data collected from four surveillance cameras installed near bathrooms and staff break areas.

Read more here