Privacy Guarantor: restrictions regarding retention of employee emails

Garante privacy: regole restrittive per la conservazione delle email dei dipendenti

The DPA’s Guidance Document no. 642 of 21 December 2023 introduces guidelines and restrictions for the management of employee emails that risk creating significant organisational and management issues for companies. This measure stipulates that employers (public and private) who use computer programmes and services to manage employee email may retain the metadata of email messages for up to a maximum of 7 days, period of time which, in the case of proven necessity, may be extended by a further 48 hours.