Università degli studi di Cassino e del Lazio Meridionale
€4,000
Non-compliance with general data processing principles
Decision Date
April 27, 2023
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Public Sector and Education
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has imposed a fine of EUR on Università degli studi di Cassino e del Lazio Meridionale. A professor at the university had filed a complaint against the university for allegedly processing their personal data unlawfully. In the course of its investigation, the DPA found that the controller had disclosed personal data of the data subject regarding criminal proceedings to third parties without a valid legal basis.
Legal Citations
Art. 5 (1)Art. 6Art. 10Art. 2Art. 2
Issues & Violations
Non-compliance with general data processing principles