Municipality of Bologna
€40,000
Insufficient technical and organisational measures to ensure information security
Ημερομηνία απόφασης
29 Απριλίου 2025
Αρχή
Italian Data Protection Authority (Garante)
IT
Τομέας
Public Sector and Education
Χώρα
IT
Νόμος
GDPRΚατάσταση
FINALΠεριγραφή
The Italian DPA has imposed a fine of EUR 40,000 on the Municipality of Bologna. The controller used a data processor (Cooperativa Sociale Quadrifoglio | ETid: 2274) to process data, including health data, of childreen with disabilities and special needs. The controller failed to ensure, that the processor had sufficient technical and organisational measures to ensure data security, resulting in a data leak.
Νομικές παραπομπές
Art. 5 (1)Art. 6 (1)Art. 9 (1)
Θέματα & Παραβάσεις
Insufficient technical and organisational measures to ensure information security