The Italian data protection authority GPDP imposed a fine of 2,000 EUR on a municipality. The case was triggered by a complaint from a former employee. During a job transfer, the municipality unlawfully forwarded data concerning the employee's and her representative's union membership to the new employer without a legal basis.