Direzione Didattica Statale 1° Circolo-Eboli
€1,500
Insufficient legal basis for data processing
Decision Date
April 28, 2022
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Public Sector and Education
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR 1,500 on the school 'Direzione Didattica Statale 1° Circolo-Eboli'. The educational institution had sent a document containing the names of all teachers and students, as well as health data of some students, to all teachers and parents, without distinguishing that teachers and parents receive only the information about students that concerns them.
Legal Citations
Art. 5Art. 6Art. 9Art. 2Art. 2
Issues & Violations
Insufficient legal basis for data processing