Comune di Montalbano Jonico

€5,000

Non-compliance with general data processing principles

Datum der Entscheidung

16. September 2021

Behörde

Italian Data Protection Authority (Garante)

IT

Sektor

Public Sector and Education

Land

IT

Recht

GDPR

Status

FINAL

Beschreibung

The Italian DPA (Garante) has imposed a fine of EUR 5,000 on the municipality of Montalbano Jonico. An individual had filed a complaint against the municipality with the DPA. He complained that a document was publicly available on the municipality's website, which contained personal data about himself and his father. Under the 'Documents and Data' section of the website, the files of the municipality could be viewed. In this context, it was possible to access a decision on a settlement for the overcoming and removal of architectural barriers in their home by filling out the corresponding search form. The decision clearly contained personal data and information in the text and subject line, such as the name of the complainant and his dependent father, with a reference to his situation as a disabled person. The text of the decision also contained the complainant's date of birth and place of residence, as well as information about the settlement sum. The DPA considered the the publication with indication of the data to be a violation of the principle of data minimization.

Juristische Zitate

Art. 5 (1)Art. 6 (1)Art. 6 (2)Art. 6 (3)Art. 9 (1)Art. 2Art. 2

Probleme und Verstöße

Non-compliance with general data processing principles

Bleiben Sie auf dem Laufenden über die Durchsetzung des Datenschutzes

Wir respektieren Ihre Privatsphäre. Eine E-Mail pro Monat, kein Spam, jederzeit abbestellbar.