Data protection for employees under Italian law

Codes of conduct

Garante promotes the adoption of ethical rules in the context of the employment relationship for the purposes of Article 88 GDPR, including specific procedures for the information to be returned to the person concerned (Article 111 + Article 2-quarter of the Italian Data Protection Code).

Unsolicited job applications­

The Italian Code also regulates the unsolicited job applications­ – Article 11-bis of the Italian Data Protection Code states that where CVs are spontaneously sent by applicants, the informing requirements of Article 13 should be provided at the time of the first useful contact. Further, obtaining of the consent to the processing of the data included in the CV is not required if Article 6(1)(b) GDPR (contract performance) applies.